Where can I find linux kernel text and LKMs in memory?

Question

Recently, I want write something to verify the integrity of the (Linux) kernel.

For the Linux kernel, the runtime code is determined by two sources:

1. the decompressed kernel image
2. a set of loadable kernel modules(LKMs)

I'm curious about where can I find the kernel image and Loadable Kernel LKMs in kernel memory？ With these information, I can compare the kernel image and LKMs to those which stored in a trusted store.

Answer 1

Linux has a virtual memory system. You can't find the Linux kernel or LKM's in the memory space of your application. You can't even find other applications in your memory space.