Can PAX_MEMORY_SANITIZE replace memory erasure on shutdown?
grsec sanitizes all freed memory.
As explained in #7649 (comment 100453), this breaks the tests that exercise our memory erasure on shutdown, but might actually allow us to drop that feature… which would be good given the lack of robustness it has historically had, that has even gotten worse recently.
So, is there anything that our current kexec-based
wipes, but that wouldn’t be erased by
Parent Task: #7649 (closed)