Where can I find linux kernel text and LKMs in memory? -
recently, want write verify integrity of (linux) kernel.
for linux kernel, runtime code determined 2 sources:
- the decompressed kernel image
- a set of loadable kernel modules(lkms)
i'm curious can find kernel image , loadable kernel lkms in kernel memory? these information, can compare kernel image , lkms stored in trusted store.
linux has virtual memory system. can't find linux kernel or lkm's in memory space of application. can't find other applications in memory space.
Comments
Post a Comment