Re: [PATCH 0/6] KGDB/KDB FIQ (NMI) debugger

2012-07-13 Thread Anton Vorontsov
On Fri, Jul 13, 2012 at 09:43:45AM -0700, Colin Cross wrote: [...] > I was referring to the security implications, not size. Leaving KDB > on is effectively instant root access over the serial console. Oh, I see. Yes, for this we'd need to disable all modification commands. [...] > > The thing

Re: [PATCH 0/6] KGDB/KDB FIQ (NMI) debugger

2012-07-13 Thread Colin Cross
On Fri, Jul 13, 2012 at 2:49 AM, Anton Vorontsov wrote: > On Thu, Jul 05, 2012 at 05:02:12PM -0700, Colin Cross wrote: > [...] >> KGDB can obviously only be enabled on development >> devices, although perhaps a more limited KDB could be left enabled. > > Um, I would argue about 'obviously'. :-)

Re: [PATCH 0/6] KGDB/KDB FIQ (NMI) debugger

2012-07-13 Thread Anton Vorontsov
On Thu, Jul 05, 2012 at 05:02:12PM -0700, Colin Cross wrote: [...] > KGDB can obviously only be enabled on development > devices, although perhaps a more limited KDB could be left enabled. Um, I would argue about 'obviously'. :-) It doesn't require CONFIG_DEBUG_INFO (-g) or something like this,

Re: [PATCH 0/6] KGDB/KDB FIQ (NMI) debugger

2012-07-13 Thread Anton Vorontsov
On Thu, Jul 05, 2012 at 05:02:12PM -0700, Colin Cross wrote: [...] KGDB can obviously only be enabled on development devices, although perhaps a more limited KDB could be left enabled. Um, I would argue about 'obviously'. :-) It doesn't require CONFIG_DEBUG_INFO (-g) or something like this, so

Re: [PATCH 0/6] KGDB/KDB FIQ (NMI) debugger

2012-07-13 Thread Colin Cross
On Fri, Jul 13, 2012 at 2:49 AM, Anton Vorontsov anton.voront...@linaro.org wrote: On Thu, Jul 05, 2012 at 05:02:12PM -0700, Colin Cross wrote: [...] KGDB can obviously only be enabled on development devices, although perhaps a more limited KDB could be left enabled. Um, I would argue about

Re: [PATCH 0/6] KGDB/KDB FIQ (NMI) debugger

2012-07-13 Thread Anton Vorontsov
On Fri, Jul 13, 2012 at 09:43:45AM -0700, Colin Cross wrote: [...] I was referring to the security implications, not size. Leaving KDB on is effectively instant root access over the serial console. Oh, I see. Yes, for this we'd need to disable all modification commands. [...] The thing is,