Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Processes with elevated privileges can disable paging by locking memory in place using the POSIX mlock() function [Open Group 2004IEEE Std 1003.1:2013]. Disabling paging ensures that memory is never copied to the hard drive, where it may be retained indefinitely in nonvolatile storage.

...

CERT C++ Secure Coding StandardMEM06-CPP. Ensure that sensitive data is not written out to disk
ISO/IEC TR 24772:2013Memory Locking [XZX]
MITRE CWECWE-591, Sensitive data storage in improperly locked memory
CWE-528, Information leak through core dump files

Bibliography

[Open Group 04IEEE Std 1003.1:2013]XSH, System Interface, mlock()
XSH, System Interface, setrlimit()
[Wheeler 2003]Section 7.14
Section 11.4

...