So, this is more of a curiosity at this point. However, I can't figure out how to directly associate loaded modules with the file on disk - checksum or whatever. Not sure if there's a debugfs module to do this, I've looked in /proc and /sys and can't find anything useful. /proc/sys/kernel /sys/devices/system/cpu/kernel_max /sys/kernel /sys/module/kernel
Again, I can run lsmod and see what modules are loaded and run modinfo and look at metadata of a kernel object module on the filesystem but how do I forensically connect the two? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/cah_obico9rbcfg4cpgaecr-_munhqphceg4hedzlhtku6gf...@mail.gmail.com
