Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

Is it possible to read virtual memory even if /dev/kmem is not available? I know that I can recompile kernel to allow this file, but that's not the solution I'm looking for. Is there some tricky way I can read it sequentially e.g. from LKM? Are there some system calls which will give me direct access to virtual memory?

share|improve this question
    
Are you after the kernel memory? Or process memory? Or memory allocated to hardware devices? Or the physical RAM? –  Gilles Feb 27 '12 at 23:05
    
@Gilles Yes, I want to access kernel memory, I need the exact output which gives me /dev/kmem. My goal is to search through memory, find function calls and insert kprobes on their addresses. –  Peter Krejci Feb 28 '12 at 10:15
add comment

1 Answer

/dev/kmem is removed on most distribution because it is a tremendous security risk without any clearcut benign uses (yes, what you want to do according to the comment is violate the kernel's security). Perhaps some of the tracing packages give you what you need? System tap comes to mind...

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.