Source code for volatility3.plugins.linux.lsmod

# This file is Copyright 2019 Volatility Foundation and licensed under the Volatility Software License 1.0
# which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
#
"""A module containing a plugin that lists loaded kernel modules."""

import logging
from typing import Iterable, List

import volatility3.framework.symbols.linux.utilities.modules as linux_utilities_modules
from volatility3.framework import constants, deprecation, interfaces, renderers
from volatility3.framework.configuration import requirements
from volatility3.framework.interfaces import plugins

vollog = logging.getLogger(__name__)


[docs] class Lsmod(plugins.PluginInterface): """Lists loaded kernel modules.""" _required_framework_version = (2, 0, 0) _version = (3, 0, 3) implementation = linux_utilities_modules.Modules.list_modules
[docs] @classmethod def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]: return [ requirements.ModuleRequirement( name="kernel", description="Linux kernel", architectures=constants.architectures.LINUX_ARCHS, ), requirements.VersionRequirement( name="linux_utilities_modules", component=linux_utilities_modules.Modules, version=(3, 0, 0), ), requirements.VersionRequirement( name="linux_utilities_modules_module_display_plugin", component=linux_utilities_modules.ModuleDisplayPlugin, version=(2, 0, 0), ), requirements.BooleanRequirement( name="dump", description="Extract listed modules", default=False, optional=True, ), ]
[docs] @classmethod @deprecation.deprecated_method( replacement=linux_utilities_modules.Modules.list_modules, replacement_version=(3, 0, 0), removal_date="2026-03-25", ) def list_modules( cls, context: interfaces.context.ContextInterface, vmlinux_module_name: str ) -> Iterable[interfaces.objects.ObjectInterface]: return linux_utilities_modules.Modules.list_modules( context, vmlinux_module_name )
[docs] def run(self): return renderers.TreeGrid( linux_utilities_modules.ModuleDisplayPlugin.columns_results, self._generator(), )
def _generator(self): yield from linux_utilities_modules.ModuleDisplayPlugin.generate_results( self.context, self.implementation, self.config["kernel"], self.config["dump"], self.open, )