1

I am trying to read the list of all open files including the shared objects of a particular program running in VM by using VMI(Virtual Machine Introspection) library. It seems that list of open files of a particular task_struct does not include all the linked shared objects.

Where in kernel, the list of all the shared objects corresponding to a process are stored ? I am guessing that it is stored in one of the kernel data structure otherwise "lsof" will not be able to gather this info.

Anil Kumar K K
  • 1,395
  • 1
  • 16
  • 27

1 Answers1

3

Relevant info is provided in /proc//maps. Reading sources to find where (and how) this list is taken from is left as an exercise for the reader.