Re: [PATCH v2] kexec: Introduce vmcoreinfo signature verification

2017-03-19 Thread Xunlei Pang
On 03/20/2017 at 11:55 AM, Baoquan He wrote: > On 03/20/17 at 10:39am, Xunlei Pang wrote: >> On 03/20/2017 at 10:13 AM, Baoquan He wrote: >>> On 03/17/17 at 12:22pm, Eric W. Biederman wrote: Xunlei Pang writes: > Currently vmcoreinfo data is updated at boot time subsys_initcall(), >>

Re: [PATCH v2] kexec: Introduce vmcoreinfo signature verification

2017-03-19 Thread Baoquan He
On 03/20/17 at 10:39am, Xunlei Pang wrote: > On 03/20/2017 at 10:13 AM, Baoquan He wrote: > > On 03/17/17 at 12:22pm, Eric W. Biederman wrote: > >> Xunlei Pang writes: > >> > >>> Currently vmcoreinfo data is updated at boot time subsys_initcall(), > >>> it has the risk of being modified by some wr

Re: [PATCH v2] kexec: Introduce vmcoreinfo signature verification

2017-03-19 Thread Xunlei Pang
On 03/20/2017 at 10:13 AM, Baoquan He wrote: > On 03/17/17 at 12:22pm, Eric W. Biederman wrote: >> Xunlei Pang writes: >> >>> Currently vmcoreinfo data is updated at boot time subsys_initcall(), >>> it has the risk of being modified by some wrong code during system >>> is running. >>> >>> As a res

Re: [PATCH v2] kexec: Introduce vmcoreinfo signature verification

2017-03-19 Thread Baoquan He
On 03/17/17 at 12:22pm, Eric W. Biederman wrote: > Xunlei Pang writes: > > > Currently vmcoreinfo data is updated at boot time subsys_initcall(), > > it has the risk of being modified by some wrong code during system > > is running. > > > > As a result, vmcore dumped may contain the wrong vmcorei

Re: [PATCH v2] kexec: Introduce vmcoreinfo signature verification

2017-03-19 Thread Xunlei Pang
On 03/18/2017 at 01:22 AM, Eric W. Biederman wrote: > Xunlei Pang writes: > >> Currently vmcoreinfo data is updated at boot time subsys_initcall(), >> it has the risk of being modified by some wrong code during system >> is running. >> >> As a result, vmcore dumped may contain the wrong vmcoreinfo

Re: [PATCH v2] kexec: Introduce vmcoreinfo signature verification

2017-03-17 Thread Eric W. Biederman
Xunlei Pang writes: > Currently vmcoreinfo data is updated at boot time subsys_initcall(), > it has the risk of being modified by some wrong code during system > is running. > > As a result, vmcore dumped may contain the wrong vmcoreinfo. Later on, > when using "crash" or "makedumpfile"(etc) util

[PATCH v2] kexec: Introduce vmcoreinfo signature verification

2017-03-16 Thread Xunlei Pang
Currently vmcoreinfo data is updated at boot time subsys_initcall(), it has the risk of being modified by some wrong code during system is running. As a result, vmcore dumped may contain the wrong vmcoreinfo. Later on, when using "crash" or "makedumpfile"(etc) utility to parse this vmcore, we prob