linux-kernel - Re: [PATCH v2] Enhance kvmconfig

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20160425004904.GD22633@zver>
Date:	Mon, 25 Apr 2016 03:49:04 +0300
From:	Andrey Utkin <andrey_utkin@...tmail.com>
To:	Borislav Petkov <bp@...en8.de>
Cc:	Paolo Bonzini <pbonzini@...hat.com>, linux-kernel@...r.kernel.org,
	x86@...nel.org, Thomas Gleixner <tglx@...utronix.de>,
	Ingo Molnar <mingo@...hat.com>,
	"H. Peter Anvin" <hpa@...or.com>
Subject: Re: [PATCH v2] Enhance kvmconfig

On Sun, Apr 24, 2016 at 10:51:29PM +0200, Borislav Petkov wrote:
> On Sun, Apr 24, 2016 at 11:35:53PM +0300, Andrey Utkin wrote:
> > Could you please test "make defconfig kvmconfig" how it boots?
> > The point of my patch is to enable user to end up with working kernel
> > for KVM guest without previously having any config,
> 
> That doesn't work as you need to control the qemu options too.

Could you please point, which ones?
I haven't changed any, and yet my host is running fine.

> The purpose of kvmconfig is to give you the bare minimum and thus
> to save you a lot of time wasted searching for all those options in
> Kconfig. You'd still need to tweak your guest kernel .config after that.

IMO current kvmconfig doesn't fulfill this purpose, because trying

- "make defconfig kvmconfig"
- "make localmodconfig kvmconfig"
- "gunzip -c /proc/config.gz > .config && make olddefconfig" (rescue
  system had way too old kernel I guess)

didn't save me a lot of hours wasted searching for all those options to
make it boot.

IMO "bare minimum" term makes sense if it boots. If it doesn't, then
"bare minimum" for what we are talking about?

Borislav, could you please tell, which options from this patch are you
using in your configs? Sorry to bother you.

Thank you for your interest.