[PATCH v2 0/7] makedumpfile security key filtering with eppic

[Aravinda Prasad]

On 2012-11-21 19:27, Vivek Goyal wrote:

> On Wed, Nov 21, 2012 at 12:49:58PM +0530, Aravinda Prasad wrote:
>>
>>
>> On 2012-11-20 15:17, Atsushi Kumagai wrote:
>>
>> ...
>>
>>
>>>>>
>>>>>
>>>>> As I mentioned, we don't need vmlinux in initramfs as filtering is done
>>>>> during post processing only.
>>>>
>>>> You are missing the point. The point is that despite the fact that
>>>> scrubbing will never be done from initramfs, all the users will pay
>>>> penalty for increased makedumpfile size.
>>>>
>>>> So why not write a separate tool (scrub-vmcore) so that makedumpfile
>>>> users don't pay the bloated size penatly.
>>>
>>> As Vivek said, I think it's difficult to persuade almost all distributor
>>> to specify EPPIC=on.
>>>
>>> So, it seems that separate tool is better way for both user and distributor.
>>> If you will make it, I will drop eppic support from v1.5.1 and export core
>>> functions from makedumpfile as library for such tools in the future.
>>>
>>> Does this meet your purpose, Aravinda ?
>>
>>
>> Vivek, Atsushi,
>>
>> How about distributions building two targets one with default
>> makedumpfile and other with EPPIC=on, which can be done by a simple
>> modification to Makefile.
> 
> That's not a good idea. Generally distributions don't ship multiple
> binaries with minor differences like that. I think going with a
> separate tool for doing this kind of filtering is better.


Customers who want to filter their dump would certainly prefer a single
tool and a single shot to throw away pages, scrub data and then
compress, split or send the resulting dump to some target using ssh.
This important functionality is lost if scrubbing is not part of
makedumpfile and a separate tool is developed which just does scrubbing.

> 
> Thanks
> Vivek
> 
> _______________________________________________
> kexec mailing list
> kexec at lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/kexec
> 


-- 
Regards,
Aravinda