Harden Live CD kernel

[jcrofts]

Eventually it might make sense to work on making the Live CD kernel more secure, protecting against "cold boot" and other hardware-based attacks. These attacks can't be stopped entirely, but there are known techniques that can mitigate them.

Here's one website that links to some more common kernel hardening patches. http://www.securityfocus.com/infocus/1539

A note could also be added to the documentation that users who need relatively high security should turn "fast boot" or similar options off in their BIOS. This will cause the BIOS to perform a destructive memory test on most/all of RAM on startup, making "cold boot" attacks on secrets stored in RAM before the reboot MUCH more difficult.