On Mon, 15 Apr 2019 22:50:10 -0500 Kees Cook keescook@chromium.org wrote:
On Mon, Apr 15, 2019 at 9:41 AM Steven Rostedt rostedt@goodmis.org wrote:
I agree with this assessment. We shouldn't use config.gz as precedence for this solution. config.gz should have been in debugfs to begin with, but I don't believe debugfs was around when config.gz was introduced. (Don't have time to look into the history of the two).
I don't agree with this: /proc/config.gz is used by a lot of tools that do sanity-check of running systems. This isn't _debugging_... it's verifying correct kernel builds. It's a fancy version of checking /proc/version.
Then we should perhaps make a new file system call tarballs ;-)
/sys/kernel/tarballs/
and place everything there. That way it removes it from /proc (which is the worse place for that) and also makes it something other than debug. That's what I did for tracefs.
-- Steve