First page Back Continue Last page Summary Graphics
How to change kernel memory
Directly - with a memory store
System call - i.e. read(fd, kernel_addr, n)
Through a driver - i.e. /dev/mem or /dev/kmem
Notes:
There are basically three ways to attempt to write into kernel memory
it can be stored into directly if it is mapped writeable into the process address space
a system call can be faked into changing it by passing a kernel address into a system call that has an output buffer as an argument.
there may be drivers whose purpose is to provide access to memory.