linux-kernel - Re: [PATCH 0/11] LTTng-core (basic tracing infrastructure) 0.5.108

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <450ADF56.4050602@us.ibm.com>
Date:	Fri, 15 Sep 2006 12:13:58 -0500
From:	"Jose R. Santos" <jrs@...ibm.com>
To:	Mathieu Desnoyers <mathieu.desnoyers@...ymtl.ca>
CC:	Ingo Molnar <mingo@...e.hu>, Karim Yaghmour <karim@...rsys.com>,
	Roman Zippel <zippel@...ux-m68k.org>,
	linux-kernel@...r.kernel.org,
	Christoph Hellwig <hch@...radead.org>,
	Andrew Morton <akpm@...l.org>, Ingo Molnar <mingo@...hat.com>,
	Greg Kroah-Hartman <gregkh@...e.de>,
	Thomas Gleixner <tglx@...utronix.de>,
	Tom Zanussi <zanussi@...ibm.com>, ltt-dev@...fik.org,
	Michel Dagenais <michel.dagenais@...ymtl.ca>,
	Douglas Niehaus <niehaus@...s.ku.edu>
Subject: Re: [PATCH 0/11] LTTng-core (basic tracing infrastructure) 0.5.108

Mathieu Desnoyers wrote:
> * Ingo Molnar (mingo@...e.hu) wrote:
> > 
> > * Roman Zippel <zippel@...ux-m68k.org> wrote:
> > 
> > the key point is that we want _zero_ "static tracepoints". Firstly, 
> > static tracepoints are fundamentally limited:
> > 
> >  - they can only be added at the source code level
> > 
> >  - modifying them requires a reboot which is not practical in a 
> >    production environment
>
> Not for kernel modules : unload/load is enough.
>   

This assumes that the module can be unloaded in the first place.  
Inserting a new probe on the disk controler for your boot drive or in 
the filesystem module would still require a reboot.

> If the trace points are modified with the code by the ones who make the
> original code changes, it lessens the maintainance overhead. Furthermore, if
> there is a major change in a code path that requires rethinking the trace
> points, the person introducing the change has the best knowledge of what to do
> with the trace point. I think that trace point maintainance should be left to
> subsystem maintainers, not a centralised task done by distributions once in a
> while.
>   

I agree with you here, I think is silly to claim dynamic instrumentation 
as a fix for the "constant maintainace overhead" of static trace point.  
Working on LKET, one of the biggest burdens that we've had is mantainig 
the probe points when something in the kernel changes enough to cause a 
breakage of the dynamic instrumentation.  The solution to this is having 
the SystemTap tapsets maintained by the subsystems maintainers so that 
changes in the code can be applied to the dynamic instrumentation as 
well.  This of course means that the subsystem maintainer would need to 
maintain two pieces of code instead of one.  There are a lot of 
advantages to dynamic vs static instrumentation, but I don't think 
maintainace overhead is one of them.

-JRS
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/