编写内核模块，读取所有进程的task_struct结构信息

内核模块代码如下，hello.c

#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/proc_fs.h>
#include<linux/sched/signal.h>
#include <linux/init.h>
static int __init hello_init(void)
{
    struct task_struct *pp;
    printk("for_each_process begin\n");
    for_each_process(pp)
    {
        printk(KERN_INFO "process_info pid:%i comm:%s flags:%i",pp->pid,pp->comm,pp->flags);
        } 
    return 0;
}
static void __exit hello_exit(void)
{
    printk("for_each_process end!\n");
}
module_init(hello_init);
module_exit(hello_exit);
MODULE_LICENSE("GPL");

Makefile代码如下

obj-m := hello.o  
KVERSION = $(shell uname -r)
KERNELDR := /lib/modules/$(KVERSION)/build
PWD := $(shell pwd)  
modules:  
                $(MAKE) -C $(KERNELDR) M=$(PWD) modules  
moduels_install:  
                $(MAKE) -C $(KERNELDR) M=$(PWD) modules_install  
clean:  
                rm -rf *.o *~ core .depend .*.cmd *.ko *.mod.c .tmp_versions

 

使用dmesg查看输出内容

来源：CSDN

作者：MXi4oyu

链接：https://blog.csdn.net/MyPC2010/article/details/104684029