On Sun, Mar 16, 2025 at 01:20:28PM +0000, Hastalavista_debian wrote:
> I wish to use LKRG (https://lkrg.org) on my RPi, but it reported error "LKRG
> requires
> CONFIG_KALLSYMS_ALL" when building, which is strange to me because I have
> never
> run
> into such problems on amd64 laptops. I checked config file of arm64 kernel
> 6.1.129 and indeed it didn't have CONFIG_KALLSYMS_ALL enabled.
>
> I wish Debian can have CONFIG_KALLSYMS_ALL enabled by default, so that
> security
> tools like LKRG can run.
I don't believe this is a good enough reason to enable this heavy
setting. The settings tells:
| Say N unless you really need all symbols, or kernel live patching.
We ship a complete set of symbols in our debug package and this is
enough for any debugging workflow.
Requiring this set to be compiled into the kernel itself is a sign of
tampering with the kernel itself.
Bastian
--
I object to intellect without discipline; I object to power without
constructive purpose.
-- Spock, "The Squire of Gothos", stardate 2124.5
