linux-kernel - Re: [PATCH] cifs: Do not enable debugging code by default

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 18 Dec 2012 07:13:17 -0500
From:	Jeff Layton <jlayton@...hat.com>
To:	Steve French <smfrench@...il.com>
Cc:	Borislav Petkov <bp@...en8.de>,
	LKML <linux-kernel@...r.kernel.org>,
	Joe Perches <joe@...ches.com>,
	Steve French <sfrench@...ba.org>, linux-cifs@...r.kernel.org
Subject: Re: [PATCH] cifs: Do not enable debugging code by default

On Mon, 17 Dec 2012 09:30:33 -0600
Steve French <smfrench@...il.com> wrote:

> I don't think taking out debugging makes sense - we need debugging a
> lot more often than expected even to diagnose user errors (usually
> relating to session establishment failures, since we are very limited
> in how much information can be passed back in mount).   If we had
> dynamic trace points for cifs and for common vfs entry points, or if
> the distros shipped dual cifs modules (one with debugging and one
> without), I wouldn't mind disabling it - but multiple times a month we
> have to diagnose user problems (sometimes user errors, sometimes
> server bugs etc.) by enabling debugging.
> 
> On Mon, Dec 17, 2012 at 3:38 AM, Borislav Petkov <bp@...en8.de> wrote:
> > Debugging code is generally disabled in the configurator since it is
> > only for devs and testers and not for the majority of the installations.
> >
> > Cc: Joe Perches <joe@...ches.com>
> > Cc: Jeff Layton <jlayton@...hat.com>
> > Cc: Steve French <sfrench@...ba.org>
> > Cc: linux-cifs@...r.kernel.org
> > Signed-off-by: Borislav Petkov <bp@...en8.de>
> > ---
> >  fs/cifs/Kconfig | 1 -
> >  1 file changed, 1 deletion(-)
> >
> > diff --git a/fs/cifs/Kconfig b/fs/cifs/Kconfig
> > index 21ff76c22a17..241a0e2853c5 100644
> > --- a/fs/cifs/Kconfig
> > +++ b/fs/cifs/Kconfig
> > @@ -124,7 +124,6 @@ config CIFS_ACL
> >
> >  config CIFS_DEBUG
> >         bool "Enable CIFS debugging routines"
> > -       default y
> >         depends on CIFS
> >         help
> >            Enabling this option adds helpful debugging messages to
> > --
> > 1.8.1.rc2
> >

I agree that we often need cifsFYI debug info in order to troubleshoot
problems. The question here though is whether compiling those in ought
to be the default.

In generic distro kernels, I think we do want that turned on even in
non-debug kernels. On an embedded arch, it's less compelling.

Might it make sense to couple this change with a change to the
CONFIG_CIFS_DEBUG help text? Something like:

"This option defaults to 'N', but enabling this is strongly encouraged
unless memory is severely constrained."

Then we can just try to make sure non-embedded distros enable it.
-- 
Jeff Layton <jlayton@...hat.com>
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/