Re: The disappearing sys_call_table export.

[Yoav Weiss]

>   And when I type 'swapoff' at the command line the whole scheme fails
> unless I am a perfect robot sysadmin and always remember to wipe the
> file.  This needs to 'fail safe' and it needs to be done within the kernel
> to be considered a working feature.
>

mv /sbin/swapoff /sbin/swapoff.real
cat >/sbin/swapoff
#!/bin/sh
/sbin/swapoff.real
/sbin/wipeswap
^D
chmod +x /sbin/swapoff

Any system that doesn't consider this fail-safe enough, shouldn't rely on
this zeroing operation even if performed by the kernel.  See the URL I
posted in this thread about encrypted swap.