Linux.
.SH HISTORY
Linux 5.14.
+.P
+Before Linux 6.5,
+.\" commit b758fe6df50daf68fef089d8f3c1cd49fc794ed2
+.BR memfd_secret ()
+was disabled by default and only available
+if the system administrator turned it on using
+"secretmem.enable=y" kernel parameter.
.SH NOTES
The
.BR memfd_secret ()
secrets exfiltration using
.BR ptrace (2).
.P
-The way
-.BR memfd_secret ()
-allocates and locks the memory may impact overall system performance,
-therefore the system call is disabled by default and only available
-if the system administrator turned it on using
-"secretmem.enable=y" kernel parameter.
-.P
To prevent potential data leaks of memory regions backed by
.BR memfd_secret ()
from a hybernation image,