Re: [PATCH v2 0/7] makedumpfile security key filtering with eppic

Aravinda Prasad
2012-11-16T09:49:36Z

On 2012-11-15 19:57, Dave Anderson wrote:
...

>>> Again, how distributions will handle it. If it is being integrated
>>> makedumpfile, as opposed to an stand alone utility, that means it
>>> makedumpfile needs to link against this library so that somebody can
>>> later filter out the symbols. And that means initramfs size bloat
>>> too?
>>
>> Yes, makedumpfile needs to be linked against eppic library for filtering
>> data and this will increase makedumpfile size and initramfs size too.
>
> Just to clarify -- your example indicates that the vmlinux file is required
> for this facility to work, correct?

Yes vmlinux file is required

>
>> makedumpfile -c -d 31 -x vmlinux --eppic key.c vmcore filtered_vmcore
>
> Clearly distros won't be putting the vmlinux file in the initramfs -- that's
> the whole reasoning behind vmcoreinfo. So the 99% of users that aren't
> interested in scrubbing will have to pay the penalty of the larger makedumpfile
> binary.

vmlinux is not required in intitramfs as the filtering is done during
post processing i.e., after the the dump ia saved

>
> Dave
>

--
Regards,
Aravinda