Skip to content

Reduce diagnostic info at boot time (e.g., boot modules) #4705

Open
@nfeske

Description

@nfeske

I'd like to reduce the amount of information printed to the kernel log, for the two following reasons.

First, information like physical addresses could potentially be misused by an attacker that has the ability to obtain the log (e.g., due to physical access of the Genode device). To rule out this risk, it is best - and good practice - to keep the amount of revealed information as little as possible.

Second, in sophisticated scenarios like Sculpt on the PinePhone, the diagnostic output delays the boot time because all those characters have to drip through the slow serial interface.

My personal experience suggests that I rarely look at this information anyway. In the rare case of debugging boot-time anomalies, I find it easy enough to temporarily drop a line like log(_rom_fs) at the platform initialization code of Genode's core.

I wonder, are there any (strong) objections against reducing the diagnostic output?

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions