Messages in this thread | | | Date | Wed, 20 Nov 2013 12:36:00 -0500 | From | "Frank Ch. Eigler" <> | Subject | Re: [PATCH -tip v3 00/23] kprobes: introduce NOKPROBE_SYMBOL() and general cleaning of kprobe blacklist |
| |
Hi -
> > Does this new blacklist cover enough that the kernel now survives a > > broadly wildcarded perf-probe, e.g. over e.g. all of its kallsyms? > > That's generally the purpose of the annotations - if it doesn't then > that's a bug.
AFAIK, no kernel since kprobes was introduced has ever stood up to that test. perf probe lacks the wildcarding powers of systemtap, so one needs to resort to something like:
# cat /proc/kallsyms | grep ' [tT] ' | while read addr type symbol; do perf probe $symbol done
then wait for a few hours for that to finish. Then, or while the loop is still running, run
# perf record -e 'probe:*' -aR sleep 1
to take a kernel down.
- FChE
| |