makedumpfile security key filtering enhancement - Add Eppic language support (formerly known as SIAL) to specify rules to scrub data in a dumpfile. Eppic was previously part of crash source code repository. The following series of patches enhance the makedumpfile to provide a more powerful way to specify rules and commands to traverse and erase complex data structures in a dump file by integrating Embeddable Pre-Processor and Interpreter for C (eppic). Eppic is an interpreter that facilitates access to the symbol and type information stored in an executable image or a dump file. Eppic defines a language semantic which is similar to C. Eppic macros can be used to specify rules/commands to erase data in an image file. makedumpfile will interpret the rules/commands provided by eppic macros with the help of eppic library and will suitably erase the required data in a dump file. Eppic provides a lot of language constructs like conditional statements, logical and arithmetic operators, nested loops, functions, etc., to traverse nested lists and trees and conditionally erase data in the dump file, enabling users to literally erase any data in the dump file which is accessible through global symbols. The series of patches integrates eppic with makdumpfile. These patches require eppic library libeppic.a and eppic_api.h header file. The libeppic.a library can be built from the eppic source code available at the following URL: http://code.google.com/p/eppic/ TODO: - Currently, works only for symbols in vmlinux, extend it to module symbols - Functionality support: - Implement the following callback functions. - apialignment - apigetenum - apigetdefs - Other functionalities specified in the code with TODO tag - Support specifying eppic macros in makedumpfile.conf file - Update erase info Changelog from v2 to v3: - Re-based to v1.5.1 - Removed EPPIC=on option from Makefile. - Dynamically loads eppic shared object instead of statically linking - Based on the discussion in the mailing list - http://lists.infradead.org/pipermail/kexec/2012-December/007450.html - Only patches 1 and 2 are modified Changelog from v1 to v2: - Re-based to v1.5.0 - Introduced EPPIC=on in makefile, and hence eppic is now optional - Incorporated review comments from Atsushi - Minor formatting changes Regards, Aravinda --- Aravinda Prasad (7): Initialize and setup eppic makedumpfile and eppic interface layer Eppic call back functions to query a dump image Implement apigetctype call back function Implement apimember and apigetrtype call back functions Extend eppic built-in functions to include memset function Support fully typed symbol access mode Makefile | 5 - dwarf_info.c | 367 +++++++++++++++++++++++++++++++++++++++++++ dwarf_info.h | 18 ++ erase_info.c | 91 ++++++++++- erase_info.h | 1 extension_eppic.c | 451 +++++++++++++++++++++++++++++++++++++++++++++++++++++ extension_eppic.h | 75 +++++++++ makedumpfile.c | 7 + makedumpfile.h | 6 + 9 files changed, 1016 insertions(+), 5 deletions(-) create mode 100644 extension_eppic.c create mode 100644 extension_eppic.h -- Aravinda Prasad
