[lkml]   [2007]   [Jan]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    Subject[PATCH 0/4] coredump: core dump masking support v2

    This patch series is version 2 of the core dump masking feature,
    which enables you to specify the memory segment types you don't
    want to dump into a core file.

    In this version, the setting for which memory segment types are
    dumped is stored as a bit field and placed next to `dumpable'
    bit field in mm_struct. Writing to these two bit fields can cause
    race condition, so I use a global spin lock to protect them from
    write-write race.
    In consideration of security, I adds a sysctl parameter to
    enable/disable this feature.

    This patch series can be applied against 2.6.20-rc4-mm1.
    The supported core file formats are ELF and ELF-FDPIC. ELF has been
    tested, but ELF-FDPIC has not been build and tested because I don't
    have the test environment.

    You can specify memory segment types you don't want to dump via
    /proc/<pid>/core_flags file, which is provided per process.
    This file represents a set of flags, but currently, only bit 0 is
    available. If bit 0 is set, the kernel core dump routine doesn't
    dump anonymous shared memory segments, which includes IPC shared
    memory and some of mmap(2)'ed memory.

    System administrator can enable/disable these flags one by one via
    /proc/sys/kernel/core_flags_enable file. The default value is 1.
    This means that bit 0 in core_flags is effective.

    Some software programs share huge memory among hundreds of
    processes. If a failure occurs on one of these processes, they can
    be signaled by a monitoring process to generate core files and
    restart the service. However, it can develop into a system-wide
    failure such as system slow down for a long time and disk space
    shortage because the total size of the core files is very huge!

    To avoid the above situation we can limit the core file size by
    setrlimit(2) or ulimit(1). But this method can lose important data
    such as stack because core dumping is terminated halfway.
    So I suggest keeping shared memory segments from being dumped for
    particular processes. Because the shared memory attached to processes
    is common in them, we don't need to dump the shared memory every time.

    If you don't want to dump all shared memory segments attached to
    pid 1234, set the bit 0 of the process's core_flags to 1:

    $ echo 1 > /proc/1234/core_flags

    Additionally, you can check its hexadecimal value by reading the file:

    $ cat /proc/1234/core_flags

    When a new process is created, the process inherits the core_flags
    setting from its parent. It is useful to set the core_flags before
    the program runs. For example:

    $ echo 1 > /proc/self/core_flags
    $ ./some_program

    - rename `coremask' to `core_flags'
    - change `core_flags' member in mm_struct to a bit field
    next to `dumpable'
    - introduce a global spin lock to protect adjacent two bit fields
    (core_flags and dumpable) from race condition
    - fix a bug that the generated core file can be corrupted when
    core dumping and updating core_flags occur concurrently
    - add kernel.core_flags_enable sysctl parameter to enable/disable
    flags in /proc/<pid>/core_flags
    - support ELF-FDPIC binary format, but not tested


    Hidehiro Kawai
    Hitachi, Ltd., Systems Development Laboratory

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2007-01-26 15:07    [W:0.025 / U:18.840 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site