RE: How does /dev/mem work?
RE: How does /dev/mem work?
- Subject: RE: How does /dev/mem work?
- From: Hajime Inoue <email@hidden>
- Date: Mon, 9 Mar 2009 11:15:22 -0400
Thanks Mike.
Michael Smith wrote:
> /dev/mem was never an interface to kexts; it was always an interface to
user space.
I'm aware of that. What I wanted to do is replicate /dev/mem functionality.
I had started
by looking at Amit Singh's blog which has an example kext that adds back
/dev/kmem.
> Perhaps you could explain what you're trying to do, and we might be able
to suggest
> some alternatives.
What I want is a physical memory image for use with forensics tools (the one
we develop
is called Mac Marshal). The actual mechanism, whether it's temporarily
adding back
/dev/mem, or through some other way, isn't important.
-Jim
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden