crash/memory_driver
Dave Anderson dfea9e3bd3 Add a write operation handler to the sample /dev/crash memory driver
that enables writing to kernel memory via the "wr" command.
(serapheim@delphix.com)
2019-01-07 10:14:45 -05:00
..
crash.c Add a write operation handler to the sample /dev/crash memory driver 2019-01-07 10:14:45 -05:00
Makefile Initial commit: crash-7.0.4 2014-01-28 16:46:11 -05:00
README Update of the sample memory_driver/crash.c /dev/crash kernel driver 2016-11-22 11:43:40 -05:00

For live system analysis, the physical memory source must be one
of the following devices:

  /dev/mem
  /proc/kcore
  /dev/crash

If the live system kernel was configured with CONFIG_STRICT_DEVMEM
or CONFIG_HARDENED_USERCOPY, then /dev/mem cannot be used. 

If the live system kernel was configured without CONFIG_PROC_KCORE,
or if /proc/kcore is non-functional, then /proc/kcore cannot be used.  

The third alternative is this /dev/crash driver.  Presuming that 
/lib/modules/`uname -r`/build points to a kernel build tree or
kernel "devel" package tree, the module can simply be built and
installed like so:

  # make
  ...
  # insmod crash.ko

Once installed, the /dev/crash driver will be used by default for
live system crash sessions.