Dmitry Vyukov
                                            Dmitry Vyukov
                                        
                                    There is something called `crash`, which is special debugger for kernel: crash - Analyze Linux crash dump data or a live system https://linux.die.net/man/8/crash https://www.linuxjournal.com/content/oops-debugging-kernel-panics-0 Also a scriptable drgn debugger: https://github.com/osandov/drgn...
We also need updated .const files along with .txt files. .const files is how syzkaller knows actual integer values of all these literal constants (e.g. what is ZX_SOCKET_PEEK?). To generate...
GCE image creation periodically fails with: ``` 2022/05/09 09:10:05 creating GCE image ci-upstream-bpf-kasan-gce... 2022/05/09 09:10:29 SYZFATAL: failed to create GCE image: create image operation failed: &{Code:PERMISSIONS_ERROR Location: Message:Required 'read' permission...
Another example we go: ``` [ 118.978828][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.987933][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.018985][ T3610] ====================================================== [ 119.018985][ T3610]...
> An attempt to write to "/sys/kernel/security/integrity/evm/evm" without additional vm setup highly likely will result in "lost connection to test machine" error due to -ENOKEY error. Will ENOKEY be returned...
> Recommended boot args for fuzzing: "ima_appraise=fix evm=fix" If it's recommended for all setups, please add it to: tools/create-gce-image.sh tools/create-image.sh If it's "weakly recommended", but it not really necessary, then...
The descriptions themselves look good to me. Though I don't understand any of these interface.
> No, one needs to generate and load crypto keys. How hard is it to do? What what does it involve? > Will it be better to just comment line?...
> > How hard is it to do? What what does it involve? > > 1. Generate keys in create-image.sh > > ``` > $ dd if=/dev/urandom bs=1 count=32 status=none...
> > Let's wait for @ebiggers, I think it's close to his area of expertise. > > Not that close. I don't work on IMA or EVM. Ack. Thanks for...