Christian Brauner 8f9c69af31 rust: add an allocator that erases memory before freeing it ...

C code keeps secrets in buffers that it frees with erase_and_free().
That's a convention every caller has to remember. With the allocator
being part of the type Rust code can make it a guarantee instead.

Add Erasing which allocates like Malloc but frees memory with
erase_and_free(), which erases it first. It never uses realloc() as
that may leave the old contents behind in the memory it frees. Growing
allocates anew, copies and erases the old memory instead. So a buffer
holding a key or a passphrase is simply a Vec<u8, Erasing>.

Note that elements a Vec drops early via pop() or truncate() stay in
its memory until it is freed.

HACKING.md and CODING_STYLE.md point secrets at it.

Signed-off-by: Christian Brauner (Amutable) <brauner@kernel.org>

2026-10-23 16:34:47 +02:00

..

_data

docs: update external links

2026-01-31 01:11:11 +09:00

_includes

docs: update footer to 2026

2026-04-14 17:32:37 +01:00

_layouts

docs: adapt forward layout to systemd.io design

2022-05-21 18:09:50 +02:00

assets

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

fonts

…

var-log

meson: install README.logs independently of HAVE_SYSV_COMPAT

2024-11-29 14:18:15 +01:00

_config.yml

Revert "docs: don't suffix page permalink with a slash"

2024-04-17 20:53:49 +02:00

.gitattributes

docs: mark spdx headers with the default license to website files

2021-10-18 09:43:18 +02:00

.gitignore

gitignore: add jekyll cache directory

2021-06-24 10:20:29 +02:00

API_FILE_SYSTEMS.md

docs: update external links

2026-01-31 01:11:11 +09:00

APPSTREAM_BUNDLE.md

sysupdate: Support changelogs & appstream metadata

2024-07-12 14:38:09 +01:00

ARCHITECTURE.md

docs: document writing programs in Rust

2026-10-23 16:34:47 +02:00

AUTOMATIC_BOOT_ASSESSMENT.md

docs: update external links

2026-01-31 01:11:11 +09:00

BACKPORTS.md

docs/BACKPORTS: update

2025-11-12 23:01:35 +00:00

BLOCK_DEVICE_LOCKING.md

docs: update external links

2026-01-31 01:11:11 +09:00

BOOT_LOADER_INTERFACE.md

docs: mention LoaderInfo efivar in BLI

2026-10-02 12:52:24 +02:00

BOOT_LOADER_SPECIFICATION.md

Revert "docs: use collections to structure the data"

2024-02-23 09:48:47 +01:00

BOOT.md

systemd-boot: add a preferred setting that's similar to default but avoids booting known-bad entries

2026-02-18 03:28:12 +09:00

BUILDING_IMAGES.md

docs: update external links

2026-01-31 01:11:11 +09:00

CATALOG.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

CGROUP_DELEGATION.md

docs: Document manual cgroup controller management for Delegate=yes

2025-04-25 00:42:24 +01:00

CODE_OF_CONDUCT.md

docs/CODE_OF_CONDUCT: format text

2024-03-27 07:11:55 +01:00

CODE_QUALITY.md

ci: Drop codeql workflow

2026-03-24 17:55:26 +01:00

CODING_STYLE.md

rust: add an allocator that erases memory before freeing it

2026-10-23 16:34:47 +02:00

CONTAINER_INTERFACE.md

docs: fix capability name, it's CAP_MKNOD not CAP_SYS_MKNOD (#41621)

2026-04-13 16:41:33 +01:00

CONTRIBUTING.md

Extend the AI policy a bit

2026-10-03 16:12:54 +02:00

CONTROL_GROUP_INTERFACE.md

docs: fix stale links

2026-10-05 09:35:58 +02:00

CONVERTING_TO_HOMED.md

docs: update external links

2026-01-31 01:11:11 +09:00

COREDUMP_PACKAGE_METADATA.md

docs: rename COREDUMP_PACKAGE_METADATA → ELF_PACKAGE_METADATA

2024-12-19 15:35:55 +01:00

COREDUMP.md

docs: update external links

2026-01-31 01:11:11 +09:00

CREDENTIALS.md

condition: make ConditionCredential= also search the credential stores

2026-10-20 06:55:47 +02:00

DAEMON_SOCKET_ACTIVATION.md

docs/DAEMON_SOCKET_ACTIVATION

2024-06-03 15:22:54 +09:00

DEBUGGING.md

docs: update external links

2026-01-31 01:11:11 +09:00

DESKTOP_ENVIRONMENTS.md

docs: update external links

2026-01-31 01:11:11 +09:00

DISCOVERABLE_PARTITIONS.md

docs: DPS and BLS have moved to uapi-group.org

2022-11-02 07:31:18 +09:00

DISK-QUOTAS-PROJECTIDS.md

core: add quota support for State, Cache, and Log exec directories

2025-07-07 17:28:47 +00:00

DISTRO_PORTING.md

docs: update external links

2026-01-31 01:11:11 +09:00

ELF_DLOPEN_METADATA.md

docs: elf metadata specs have moved to uapi-group

2025-11-19 20:00:25 +01:00

ELF_PACKAGE_METADATA.md

docs: rename COREDUMP_PACKAGE_METADATA → ELF_PACKAGE_METADATA

2024-12-19 15:35:55 +01:00

ENVIRONMENT.md

dissect-image: enforce validatefs xattrs when mounting partitions

2026-10-17 17:44:29 +02:00

FACTORY_RESET.md

docs: fix stale links

2026-10-05 09:35:58 +02:00

FAQ.md

docs: update external links

2026-01-31 01:11:11 +09:00

favicon.png

…

favicon.svg

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

FILE_DESCRIPTOR_STORE.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

GOVERNANCE.md

Move subsystem maintainers to CODEOWNERS

2026-10-02 14:58:43 +02:00

GROUP_RECORD.md

docs: punctuation and a typo

2025-05-14 18:06:04 +02:00

HACKING.md

rust: add an allocator that erases memory before freeing it

2026-10-23 16:34:47 +02:00

HOME_DIRECTORY.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

INCOMPATIBILITIES.md

docs/INCOMPATIBILITIES: fix typo

2026-02-09 02:36:50 +01:00

index.md

Drop remaining references about sysv script support

2026-01-16 22:56:08 +09:00

INHIBITOR_LOCKS.md

docs/INHIBITOR_LOCKS: Update sentence for the new mode added

2026-06-06 13:44:49 +01:00

INITRD_INTERFACE.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

JOURNAL_EXPORT_FORMATS.md

docs: update external links

2026-01-31 01:11:11 +09:00

JOURNAL_FILE_FORMAT.md

docs: wrap bare enum constants in inline code in JOURNAL_FILE_FORMAT

2026-03-12 09:37:24 +01:00

JOURNAL_NATIVE_PROTOCOL.md

docs: update external links

2026-01-31 01:11:11 +09:00

LABELS.md

docs: Add doc for describing the meaning of github labels

2026-10-02 14:56:31 +02:00

MEMORY_PRESSURE.md

docs: Update MEMORY_PRESSURE.md => PRESSURE.md

2026-04-09 22:47:10 +02:00

MINIMAL_BUILDS.md

tree-wide: drop unused libcap dependencies

2025-10-24 01:52:59 +09:00

MOUNT_REQUIREMENTS.md

docs/MOUNT_REQUIREMENTS: fix typo

2025-11-25 22:52:10 +09:00

MY_SERVICE_CANT_GET_REALTIME.md

docs: update external links

2026-01-31 01:11:11 +09:00

NETWORK_ONLINE.md

docs: update external links

2026-01-31 01:11:11 +09:00

OPTIMIZATIONS.md

docs: fix stale links

2026-10-05 09:35:58 +02:00

OSC_CONTEXT.md

docs: add redirection of the osc context to uapi website

2025-12-18 10:50:23 +01:00

PACKAGE_METADATA_FOR_EXECUTABLE_FILES.md

docs: elf metadata specs have moved to uapi-group

2025-11-19 20:00:25 +01:00

PASSWORD_AGENTS.md

docs/PASSWORD_AGENTS: document the AcceptCached= field

2025-12-31 10:59:41 -05:00

PAX_CONTROL_GROUPS.md

docs: fix multiple grammar errors

2026-01-29 00:40:18 +09:00

PORTABILITY_AND_STABILITY.md

NEWS, docs: document SD_VARLINK_EXPERIMENTAL

2026-10-19 11:28:33 +02:00

PORTABLE_SERVICES.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

PORTING_TO_NEW_ARCHITECTURES.md

docs: reference UAPI specs by their number when linked

2025-11-23 17:16:09 +01:00

PREDICTABLE_INTERFACE_NAMES.md

docs: update external links

2026-01-31 01:11:11 +09:00

PRESET.md

docs: update external links

2026-01-31 01:11:11 +09:00

PRESSURE.md

docs: Update memory pressure docs for latest GLib support for it

2026-07-02 15:05:14 +01:00

RANDOM_SEEDS.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

RELEASE.md

docs: note step to update obs workflow file on release

2026-02-09 09:36:53 +01:00

RESOLVED-VPNS.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

ROOT_STORAGE_DAEMONS.md

docs: fix SurviveFinalKillSignal typo

2025-07-22 18:03:39 +01:00

ROOTFS_DISCOVERY.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

rootfs-discovery-flow.svg

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

SECURITY.md

docs: say that the github form is preferred for security vulnerabilities

2026-06-01 15:06:20 +01:00

SEPARATE_USR_IS_BROKEN.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

style.css

docs: contain image sizing and prevent overflow on mobile

2026-03-12 09:38:03 +01:00

SYSLOG.md

docs: update external links

2026-01-31 01:11:11 +09:00

SYSTEMD_FILE_HIERARCHY_REQUIREMENTS.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

sysupdate-objects.svg

docs: Add a diagram for the internals of sysupdate

2026-01-30 13:19:33 +09:00

TEMPORARY_DIRECTORIES.md

docs: update external links

2026-01-31 01:11:11 +09:00

TESTING_WITH_SANITIZERS.md

docs: fix mkosi section for Environment= setting

2025-04-16 08:30:25 +09:00

THE_CASE_FOR_THE_USR_MERGE.md

docs: update external links

2026-01-31 01:11:11 +09:00

TIPS_AND_TRICKS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

TPM2_NVINDEX_ASSIGNMENTS.md

docs: two follow-ups for NV Index registry commit

2026-10-16 09:16:07 +02:00

TPM2_PCR_MEASUREMENTS.md

docs: two follow-ups for NV Index registry commit

2026-10-16 09:16:07 +02:00

TRANSIENT-SETTINGS.md

cgroup: Add CPUSetPartition= setting

2026-05-14 08:55:44 +02:00

TRANSLATORS.md

Revert "docs: use collections to structure the data"

2024-02-23 09:48:47 +01:00

UIDS-GIDS.md

nsresourced: Optionally map foreign UID range

2026-02-24 18:29:37 +01:00

USER_GROUP_API.md

userdb: suppress lookups outside of indicated ranges

2026-07-12 23:09:01 +02:00

USER_NAMES.md

docs: update external links

2026-01-31 01:11:11 +09:00

USER_RECORD_BLOB_DIRS.md

docs: use absolute links for our pages

2024-04-17 21:21:23 +02:00

USER_RECORD.md

Fix typos in USER_RECORD.md documentation

2026-08-16 10:25:33 +01:00

USERDB_AND_DESKTOPS.md

docs: update external links

2026-01-31 01:11:11 +09:00

VARLINK.md

NEWS, docs: document SD_VARLINK_EXPERIMENTAL

2026-10-19 11:28:33 +02:00

VM_INTERFACE.md

docs: fix typo

2024-03-15 04:04:01 +09:00

WRITING_DESKTOP_ENVIRONMENTS.md

docs: update external links

2026-01-31 01:11:11 +09:00

WRITING_DISPLAY_MANAGERS.md

docs: fix typo

2026-09-22 18:46:41 +02:00

WRITING_NETWORK_CONFIGURATION_MANAGERS.md

docs/WRITING_NETWORK_CONFIG_MANAGERS: format text

2024-03-27 07:31:54 +01:00

WRITING_RESOLVER_CLIENTS.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

WRITING_VM_AND_CONTAINER_MANAGERS.md

docs: fix misleading VM/machined documentation

2026-04-02 12:55:33 +02:00