실습: dump kernel page tables

TAEWOO HA·2023년 6월 13일
0

목표: debugfs의 kernel_page_tables 내용 확인

kernel source download

• $ apt install linux-source libelf-dev libssl-dev dwarves
• $ tar jxvf /usr/src/linux-source-5.15.0.tar.bz2

kernel compile 및 설치

• $ cd linux-source-5.15.0
• $ make localmodconfig
• $ make menuconfig
– Enable CONFIG_PTDUMP_DEBUGFS (kernel hacking à memory debugging à export kernel page
table …)
• $ make –j5
• $ make modules_install && make install
– 재부팅

Trobule Shooting

apt install linux-source libelf-dev libssl-dev dwarves bison flex
tar jxvf /usr/src/linux-source-5.15.0.tar.bz2
cd linux-source-5.15.0
make localmodconfig
config 파일 수정 # CONFIG_X86_X32=n ==> menuconfig에서 설정가능

scripts/config --disable SYSTEM_REVOCATION_KEYS
make -j5
make modules_install && make install
reboot

mount -t debugfs /
cat /sys/kernel/debug/page_tables/kernel | more
cat /sys/kernel/debug/page_tables/kernel > kernel_page_tables
vi kernel_page_tables

0개의 댓글