On Thu, 2006-07-06 at 15:06 +0530, Daniel Rodrick wrote: > Hi list, > > I read that the /dev/mem represents the memory of the system. > > 1) Does that mean I can if start reading from /dev/mem, I can read any > portion of the memory? depends on your kernel; several distributions apply security patches that prevent rootkits from doing evil things in /dev/mem; with those you can only access non-kernel memory via /dev/mem > 2) If I read at offset "n" in the file /dev/mem, would I be reading > contents of the PHYSICAL memory address "n", or the VIRTUAL memory > addtress "n"? PHYSICAL. if you want virutal you need to use /dev/kmem. -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/
