Aw: Re: new module to check constant memory for corruption

2014-04-14 Thread Alexander . Kleinsorge
Hi Andi, I would like to ask for your help. Is there a central kernel function that enables/disables write-protection for kernel memory? I only know the place, where its write protected at booting for x86/x64. If there is one place, it would be much easier, as to hook into many places (e.g. ftra

Aw: Re: new module to check constant memory for corruption

2014-04-13 Thread Alexander . Kleinsorge
Hi Andi, the module considers only the adress range between: kallsyms_lookup_name("_text") .. kallsyms_lookup_name("__end_rodata"). this range has a typical size of 10..20 mb (depending on kernel-version and arch).  see files: linux-3.*\arch\x86\mm\init_32.c + init_64.c function: void mark_rodat