diff options
| author | Joseph Richey <joerichey94@gmail.com> | 2017-10-24 13:19:08 -0700 |
|---|---|---|
| committer | Joseph Richey <joerichey94@gmail.com> | 2017-10-24 13:21:36 -0700 |
| commit | f7b99a39152694f72104b95e6a30e245248c75d7 (patch) | |
| tree | d020baa01807d8e0e73ac7cbb2bc5edbc0c7b55e /security/cache.go | |
| parent | 6de6b14a09b3695fe797e5fd59a04b3c3834641a (diff) | |
crypto: Merge with security packagerefactor
Diffstat (limited to 'security/cache.go')
| -rw-r--r-- | security/cache.go | 49 |
1 files changed, 0 insertions, 49 deletions
diff --git a/security/cache.go b/security/cache.go deleted file mode 100644 index d0c60b1..0000000 --- a/security/cache.go +++ /dev/null @@ -1,49 +0,0 @@ -/* - * cache.go - Handles cache clearing and management. - * - * Copyright 2017 Google Inc. - * Author: Joe Richey (joerichey@google.com) - * - * Licensed under the Apache License, Version 2.0 (the "License"); you may not - * use this file except in compliance with the License. You may obtain a copy of - * the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT - * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the - * License for the specific language governing permissions and limitations under - * the License. - */ - -package security - -import ( - "log" - "os" - - "golang.org/x/sys/unix" -) - -// DropFilesystemCache instructs the kernel to free the reclaimable inodes and -// dentries. This has the effect of making encrypted directories whose keys are -// not present no longer accessible. Requires root privileges. -func DropFilesystemCache() error { - // Dirty reclaimible inodes must be synced so that they will be freed. - log.Print("syncing changes to filesystem") - unix.Sync() - - // See: https://www.kernel.org/doc/Documentation/sysctl/vm.txt - log.Print("freeing reclaimable inodes and dentries") - file, err := os.OpenFile("/proc/sys/vm/drop_caches", os.O_WRONLY|os.O_SYNC, 0) - if err != nil { - return err - } - defer file.Close() - // "2" just frees the reclaimable inodes and dentries, the associated - // pages to these inodes will be freed. We do not need to free the - // entire pagecache (as this will severly impact performance). - _, err = file.WriteString("2") - return err -} |