madvise.2: Some tweaks to Rik's MADV_WIPEONFORK patch

Reviewed-by: Rik van Riel <riel@redhat.com>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2017-09-19 20:38:29 +02:00
parent 399f3e392b
commit 2c63b13e3d
1 changed files with 5 additions and 4 deletions

View File

@ -410,13 +410,14 @@ regardless of memory pressure.
.\" commit d2cd9ede6e193dd7d88b6d27399e96229a551b19
Present the child process with zero-filled memory in this range after a
.BR fork (2).
This is useful for per-process data in forking servers that should be
re-initialized in the child process after a fork, for example PRNG seeds,
cryptographic secrets, etc.
This is useful in forking servers in order to ensure
that sensitive per-process data
(for example, PRNG seeds, cryptographic secrets, and so on)
is not handed to child processes.
.IP
The
.B MADV_WIPEONFORK
operation can only be applied to private anonymous pages (see
operation can be applied only to private anonymous pages (see
.BR mmap (2)).
.TP
.BR MADV_KEEPONFORK " (since Linux 4.14)"