On Sat, Sep 11, 2021 at 2:05 AM Gabriele <phoenix1987@xxxxxxxxx> wrote: > > Hi there > > I recently started playing around with libbpf and I was wondering if > it is possible to read a process' VM from the kernel side. In > user-space one could use process_vm_read, but I haven't been able to > find an equivalent BPF API for that. Currently only current process's memory (in which BPF program is running) can be read with bpf_probe_read_user(). I don't think there is anything that allows reading some other process' data like process_vm_read allows. > > Cheers, > Gab
