Re: [PATCH v2 0/7] makedumpfile security key filtering with eppic

Atsushi Kumagai
2012-11-14T01:17:31Z

Hello Aravinda,

On Thu, 08 Nov 2012 19:07:52 +0530
Aravinda Prasad <aravinda@linux.vnet.ibm.com> wrote:

> makedumpfile security key filtering enhancement - Add Eppic language
> support (formerly known as SIAL) to specify rules to scrub data in a
> dumpfile. Eppic was previously part of crash source code repository.
>
> The following series of patches enhance the makedumpfile to provide
> a more powerful way to specify rules and commands to traverse and
> erase complex data structures in a dump file by integrating Embeddable
> Pre-Processor and Interpreter for C (eppic).
>
> Eppic is an interpreter that facilitates access to the symbol and type
> information stored in an executable image or a dump file. Eppic defines
> a language semantic which is similar to C. Eppic macros can be used to
> specify rules/commands to erase data in an image file. makedumpfile
> will interpret the rules/commands provided by eppic macros with the
> help of eppic library and will suitably erase the required data in a
> dump file. Eppic provides a lot of language constructs like conditional
> statements, logical and arithmetic operators, nested loops, functions,
> etc., to traverse nested lists and trees and conditionally erase data
> in the dump file, enabling users to literally erase any data in the
> dump file which is accessible through global symbols.
>
> The series of patches integrates eppic with makdumpfile. These patches
> require eppic library libeppic.a and eppic_api.h header file. The
> libeppic.a library can be built from the eppic source code available
> at the following URL:
>
> http://code.google.com/p/eppic/

Thank you for re-sending your patches, I'll merge them into v1.5.1-rc.
And thanks for sending your test script, it's helpful for understanding
how to use eppic macro.

Atsushi Kumagai

>
> TODO:
>
> - Currently, works only for symbols in vmlinux, extend it to module
> symbols
> - Functionality support:
> - Implement the following callback functions.
> - apialignment
> - apigetenum
> - apigetdefs
> - Other functionalities specified in the code with TODO tag
> - Support specifying eppic macros in makedumpfile.conf file
> - Update erase info
>
> Changelog from v1 to v2:
>
> - Re-based to v1.5.0
> - Introduced EPPIC=on in makefile, and hence eppic is now optional
> - Incorporated review comments from Atsushi
> - Minor formatting changes
>
> Regards,
> Aravinda
> ---
>
> Aravinda Prasad (7):
> Initialize and setup eppic
> makedumpfile and eppic interface layer
> Eppic call back functions to query a dump image
> Implement apigetctype call back function
> Implement apimember and apigetrtype call back functions
> Extend eppic built-in functions to include memset function
> Support fully typed symbol access mode
>
>
> Makefile | 7 +
> dwarf_info.c | 367 +++++++++++++++++++++++++++++++++++++++++++
> dwarf_info.h | 18 ++
> erase_info.c | 83 +++++++++-
> erase_info.h | 5 +
> extension_eppic.c | 451 +++++++++++++++++++++++++++++++++++++++++++++++++++++
> extension_eppic.h | 78 +++++++++
> makedumpfile.c | 7 +
> makedumpfile.h | 6 +
> 9 files changed, 1018 insertions(+), 4 deletions(-)
> create mode 100644 extension_eppic.c
> create mode 100644 extension_eppic.h
>
> --
> Aravinda Prasad
>
>
> _______________________________________________
> kexec mailing list
> kexec@lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/kexec