memdump for Debian ------------------ This program will not work if CONFIG_STRICT_DEVMEM is enabled in kernel. Since 2.6 version, several kernels are enabling this option by default. This option will protect the memory against access from user space. On Debian, to check it, you can use: # cat /boot/config-* | grep CONFIG_STRICT_DEVMEM An alternative is use the package lime-forensics. memdump is a better option than lime-forensics because can be used directly over operational system, no needing compiling kernel modules. -- Joao Eriberto Mota Filho Mon, 26 Nov 2018 22:08:45 -0200