summaryrefslogtreecommitdiffstats
path: root/man/cryptsetup-luksSuspend.8.adoc
diff options
context:
space:
mode:
Diffstat (limited to 'man/cryptsetup-luksSuspend.8.adoc')
-rw-r--r--man/cryptsetup-luksSuspend.8.adoc4
1 files changed, 4 insertions, 0 deletions
diff --git a/man/cryptsetup-luksSuspend.8.adoc b/man/cryptsetup-luksSuspend.8.adoc
index ed20681..c5f90ce 100644
--- a/man/cryptsetup-luksSuspend.8.adoc
+++ b/man/cryptsetup-luksSuspend.8.adoc
@@ -20,6 +20,10 @@ Suspends an active device (all IO operations will block and accesses to
the device will wait indefinitely) and wipes the encryption key from
kernel memory. Needs kernel 2.6.19 or later.
+While the _luksSuspend_ operation wipes encryption keys from memory,
+it does not remove possible plaintext data in various caches or in-kernel
+metadata for mounted filesystems.
+
After this operation, you have to use _luksResume_ to reinstate the
encryption key and unblock the device or _close_ to remove the mapped
device.