linux-kernel - Re: [PATCH 4/6] trace: trace syscall in its handler not from ptrace handler

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1332989953.23924.183.camel@gandalf.stny.rr.com>
Date:	Wed, 28 Mar 2012 22:59:13 -0400
From:	Steven Rostedt <rostedt@...dmis.org>
To:	"H. Peter Anvin" <hpa@...or.com>
Cc:	Vaibhav Nagarnaik <vnagarnaik@...gle.com>,
	Frederic Weisbecker <fweisbec@...il.com>,
	Thomas Gleixner <tglx@...utronix.de>,
	Ingo Molnar <mingo@...hat.com>,
	David Sharp <dhsharp@...gle.com>,
	Justin Teravest <teravest@...gle.com>,
	Laurent Chavey <chavey@...gle.com>, x86@...nel.org,
	linux-kernel@...r.kernel.org
Subject: Re: [PATCH 4/6] trace: trace syscall in its handler not from ptrace
 handler

On Wed, 2012-03-28 at 19:43 -0700, H. Peter Anvin wrote:

> The syscall interface is the single most stable interface in the kernel.
>  Just plunk down the system call number and the six arguments in the
> buffer, and be done with it.  On the way out, there is a single return
> argument, *by design*.  No need to burden the kernel in this way! That
> this information can be perfectly well decoded in userspace is already
> shown by strace, although it would be highly beneficial if the kernel
> build could export information to strace and other tools.  There is
> absolutely no need for it to live in kernel memory, though.

Even if it did live in kernel memory (which it does now, and I'm not
sure if we can change it due to the *don't break existing tools* law).
We should be able to at least compress it so that it doesn't waste as
much memory.

-- Steve


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/