[Cryptography] WIPEONFORK in Linux 4.14

[Darren Moffat]

Is the use case for when we are purposely creating a multi-process system,
by using fork/vfork/clone, where all the processes are running the same
code?
Or is it about fork/exec? In this case an in kernel posix_spawn() avoids
many of the issues. Particularly those I've been involved with where the
JVM was using native crypto libraries and we were depending first on
getpid() and then on stacked pthread_atfork() handlers.

Darren
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20171128/0ce0e11a/attachment.html>