Cold Boot Attack Defense Fixes

[friedy10]

No description provided.

[raja-grewal]

The way I understand it, this one recommended approach to implement cold boot attack defense.

However, is it possible that using kexec may cause some issues since its use is explicitly disabled via sysctl kernel.kexec_load_disabled=1?

Note as mentioned in the README.md “[k]exec is disabled as it can be used to load a malicious kernel and gain arbitrary code execution in kernel mode”.

[raja-grewal]

Follow up discussion:
https://forums.whonix.org/t/kernel-hardening/7296/505

[adrelanos]

Fixed:
https://forums.whonix.org/t/kernel-hardening/7296/508