[PATCH v4 0/9] makedumpfile security key filtering with eppic
Atsushi Kumagai
kumagai-atsushi at mxc.nes.nec.co.jp
Wed Feb 6 02:02:15 EST 2013
Hello Aravinda,
On Mon, 04 Feb 2013 12:39:31 +0530
Aravinda Prasad <aravinda at linux.vnet.ibm.com> wrote:
> makedumpfile security key filtering enhancement - Add Eppic language
> support (formerly known as SIAL) to specify rules to scrub data in a
> dumpfile. Eppic was previously part of crash source code repository.
>
> The following series of patches enhance the makedumpfile to provide
> a more powerful way to specify rules and commands to traverse and
> erase complex data structures in a dump file by integrating Embeddable
> Pre-Processor and Interpreter for C (eppic).
>
> Eppic is an interpreter that facilitates access to the symbol and type
> information stored in an executable image or a dump file. Eppic defines
> a language semantic which is similar to C. Eppic macros can be used to
> specify rules/commands to erase data in an image file. makedumpfile
> will interpret the rules/commands provided by eppic macros with the
> help of eppic library and will suitably erase the required data in a
> dump file. Eppic provides a lot of language constructs like conditional
> statements, logical and arithmetic operators, nested loops, functions,
> etc., to traverse nested lists and trees and conditionally erase data
> in the dump file, enabling users to literally erase any data in the
> dump file which is accessible through global symbols.
>
> The series of patches integrates eppic with makdumpfile. These patches
> require eppic library libeppic.a and eppic_api.h header file. The
> libeppic.a library can be built from the eppic source code available
> at the following URL:
>
> http://code.google.com/p/eppic/
>
> TODO:
>
> - Currently, works only for symbols in vmlinux, extend it to module
> symbols
> - Functionality support:
> - Implement the following callback functions.
> - apialignment
> - apigetenum
> - apigetdefs
> - Other functionalities specified in the code with TODO tag
> - Support specifying eppic macros in makedumpfile.conf file
> - Update erase info
>
> Changelog from v3 to v4:
>
> - Incorporated review comments from Atsushi
> - Removed obsolete symbol _init().
> - Changed to explicit initialization of dlopen library
> - Added missing -ltinfo in Makefile
> - Additional 8th patch, a hack to workaround the limitation when
> makedumpfile is compiled with "-static" flag
> - Additional 9th patch which includes man page updates
Good, I'll merge v4 patches into the next version with small addition
to README. Thanks for all your hard work !
Thanks
Atsushi Kumagai
> Changelog from v2 to v3:
> - Re-based to v1.5.1
> - Removed EPPIC=on option from Makefile.
> - Dynamically loads eppic shared object instead of statically linking
> - Based on the discussion in the mailing list
> - http://lists.infradead.org/pipermail/kexec/2012-December/007450.html
> - Only patches 1 and 2 are modified
>
> Changelog from v1 to v2:
>
> - Re-based to v1.5.0
> - Introduced EPPIC=on in makefile, and hence eppic is now optional
> - Incorporated review comments from Atsushi
> - Minor formatting changes
>
> Regards,
> Aravinda
> ---
>
> Aravinda Prasad (9):
> Initialize and setup eppic
> makedumpfile and eppic interface layer
> Eppic call back functions to query a dump image
> Implement apigetctype call back function
> Implement apimember and apigetrtype call back functions
> Extend eppic built-in functions to include memset function
> Support fully typed symbol access mode
> Hack for the limitation when compiled with -static
> Update Documentation
>
>
> Makefile | 5 -
> dwarf_info.c | 367 +++++++++++++++++++++++++++++++++++++++++++
> dwarf_info.h | 18 ++
> erase_info.c | 116 +++++++++++++-
> erase_info.h | 17 ++
> extension_eppic.c | 452 +++++++++++++++++++++++++++++++++++++++++++++++++++++
> extension_eppic.h | 95 +++++++++++
> makedumpfile.8 | 18 ++
> makedumpfile.c | 7 +
> makedumpfile.h | 6 +
> print_info.c | 13 +-
> 11 files changed, 1105 insertions(+), 9 deletions(-)
> create mode 100644 extension_eppic.c
> create mode 100644 extension_eppic.h
>
> --
> Aravinda Prasad
>
More information about the kexec
mailing list