linux-kernel - RE: Question: perf dso support for /proc/kallsyms

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <AM6PR08MB3686A4DD9B75B551885C790386CF0@AM6PR08MB3686.eurprd08.prod.outlook.com>
Date:   Fri, 2 Nov 2018 12:08:04 +0000
From:   Al Grant <Al.Grant@....com>
To:     "leo.yan@...aro.org" <leo.yan@...aro.org>,
        "acme@...hat.com" <acme@...hat.com>, Jiri Olsa <jolsa@...nel.org>,
        Mathieu Poirier <mathieu.poirier@...aro.org>
CC:     Coresight ML <coresight@...ts.linaro.org>,
        "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: RE: Question: perf dso support for /proc/kallsyms

> Now I still don't understand how the dso/map support "/proc/kallsyms" and
> have no idea to fix this issue, though I spent some time to look into it.

The way this is supported is that at record time, pseudo mmap records
are created for the kernel. But depending on permissions these might
not get created. This isn't just an ETM issue, it can happen on Intel too.

What do you see in "perf report -D", do you see a PERF_RECORD_MMAP
record for "[kernel.kallsyms]_text" and possibly some others for loadable
kernel modules in /lib/modules?

Does it all work if you run perf record as sudo? Or if you do

   sudo sysctl kernel.kptr_restrict=0

before you run perf record?

Al
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.