[PATCH v2 0/7] makedumpfile security key filtering with eppic

[Aravinda Prasad]

On 2012-11-15 19:57, Dave Anderson wrote:
...

>>> Again, how distributions will handle it. If it is being integrated
>>> makedumpfile, as opposed to an stand alone utility, that means it
>>> makedumpfile needs to link against this library so that somebody can
>>> later filter out the symbols. And that means initramfs size bloat
>>> too?
>>
>> Yes, makedumpfile needs to be linked against eppic library for filtering
>> data and this will increase makedumpfile size and initramfs size too.
> 
> Just to clarify -- your example indicates that the vmlinux file is required
> for this facility to work, correct?


Yes vmlinux file is required

> 
>> makedumpfile -c -d 31 -x vmlinux --eppic key.c vmcore filtered_vmcore
> 
> Clearly distros won't be putting the vmlinux file in the initramfs -- that's
> the whole reasoning behind vmcoreinfo.  So the 99% of users that aren't
> interested in scrubbing will have to pay the penalty of the larger makedumpfile
> binary.


vmlinux is not required in intitramfs as the filtering is done during
post processing i.e., after the the dump ia saved

> 
> Dave
> 


-- 
Regards,
Aravinda