[PATCH v2 0/7] makedumpfile security key filtering with eppic

Aravinda Prasad aravinda at linux.vnet.ibm.com
Fri Nov 16 04:49:05 EST 2012

On 2012-11-15 19:57, Dave Anderson wrote:

>>> Again, how distributions will handle it. If it is being integrated
>>> makedumpfile, as opposed to an stand alone utility, that means it
>>> makedumpfile needs to link against this library so that somebody can
>>> later filter out the symbols. And that means initramfs size bloat
>>> too?
>> Yes, makedumpfile needs to be linked against eppic library for filtering
>> data and this will increase makedumpfile size and initramfs size too.
> Just to clarify -- your example indicates that the vmlinux file is required
> for this facility to work, correct?

Yes vmlinux file is required

>> makedumpfile -c -d 31 -x vmlinux --eppic key.c vmcore filtered_vmcore
> Clearly distros won't be putting the vmlinux file in the initramfs -- that's
> the whole reasoning behind vmcoreinfo.  So the 99% of users that aren't
> interested in scrubbing will have to pay the penalty of the larger makedumpfile
> binary.

vmlinux is not required in intitramfs as the filtering is done during
post processing i.e., after the the dump ia saved

> Dave


More information about the kexec mailing list