mirror of
https://github.com/crash-utility/crash
synced 2025-02-13 11:58:46 +00:00
e726a31519
to version 1.3, which adds support for Linux 4.6 and later ARM64 kernels, kernels configured with CONFIG_HARDENED_USERCOPY, and S390X kernels use xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() instead of kmap() and kunmap(). (anderson@redhat.com)
25 lines
743 B
Plaintext
25 lines
743 B
Plaintext
For live system analysis, the physical memory source must be one
|
|
of the following devices:
|
|
|
|
/dev/mem
|
|
/proc/kcore
|
|
/dev/crash
|
|
|
|
If the live system kernel was configured with CONFIG_STRICT_DEVMEM
|
|
or CONFIG_HARDENED_USERCOPY, then /dev/mem cannot be used.
|
|
|
|
If the live system kernel was configured without CONFIG_PROC_KCORE,
|
|
or if /proc/kcore is non-functional, then /proc/kcore cannot be used.
|
|
|
|
The third alternative is this /dev/crash driver. Presuming that
|
|
/lib/modules/`uname -r`/build points to a kernel build tree or
|
|
kernel "devel" package tree, the module can simply be built and
|
|
installed like so:
|
|
|
|
# make
|
|
...
|
|
# insmod crash.ko
|
|
|
|
Once installed, the /dev/crash driver will be used by default for
|
|
live system crash sessions.
|