volatility
volatility copied to clipboard
fail to create linux profile
hey i am face this issue when i compile /tools/linux..
najeeb@najeeb:/usr/local/src/volatility/tools/linux$ sudo make make -C //lib/modules/4.4.0-63-generic/build CONFIG_DEBUG_INFO=y M="" modules make[1]: Entering directory '/usr/src/linux-headers-4.4.0-63-generic' HOSTCC scripts/basic/fixdep HOSTCC scripts/basic/bin2c HOSTCC scripts/kconfig/conf.o HOSTCC scripts/kconfig/zconf.tab.o HOSTLD scripts/kconfig/conf scripts/kconfig/conf --silentoldconfig Kconfig make[2]: *** No rule to make target 'arch/x86/entry/syscalls/syscall_32.tbl', needed by 'arch/x86/entry/syscalls/../../include/generated/asm/syscalls_32.h'. Stop. arch/x86/Makefile:199: recipe for target 'archheaders' failed make[1]: *** [archheaders] Error 2 make[1]: Leaving directory '/usr/src/linux-headers-4.4.0-63-generic' Makefile:10: recipe for target 'dwarf' failed make: *** [dwarf] Error 2
same here
@rschmidtz does your output also include M=""
? That part seems weird to me, it seems that "$(PWD)"
in the Makefile is not resolved correctly. On my test VM it is:
$ make
make -C //lib/modules/3.2.0-121-generic/build CONFIG_DEBUG_INFO=y M="/tmp/linux" modules
make[1]: Entering directory `/usr/src/linux-headers-3.2.0-121-generic'
CC [M] /tmp/linux/module.o
...
Can you try running
sed -i 's/PWD/shell pwd/g' Makefile
and rerun make
?
EDIT: Ran into this, they state that $PWD might not necessarily propagated with sudo and to use $(CURDIR) instead.
Are you still unable to create a profile?
@bneuburg thanks, this worked for me:
sed -i 's/PWD/shell pwd/g' Makefile
nice...
getting this error!!
root@ubuntu:/usr/share/volatility/tools/linux# make
make -C //lib/modules/4.4.0-142-generic/build CONFIG_DEBUG_INFO=y M=/usr/src/volatility-tools/linux modules
make[1]: Entering directory `/usr/src/linux-headers-4.4.0-142-generic'
CC [M] /usr/src/volatility-tools/linux/module.o
/usr/src/volatility-tools/linux/module.c:150:8: error: redefinition of ‘struct radix_tree_node’
struct radix_tree_node {
^
In file included from include/linux/fs.h:14:0,
from /usr/src/volatility-tools/linux/module.c:9:
include/linux/radix-tree.h:87:8: note: originally defined here
struct radix_tree_node {
^
make[2]: *** [/usr/src/volatility-tools/linux/module.o] Error 1
make[1]: *** [_module_/usr/src/volatility-tools/linux] Error 2
make[1]: Leaving directory `/usr/src/linux-headers-4.4.0-142-generic'
make: *** [dwarf] Error 2
Tried this: sed -i 's/PWD/shell pwd/g' Makefile Still no luck!
the problem { make[2]: *** [scripts/Makefile.modpost:124: /home/hawk/Desktop/volatility/tools/linux/Module.symvers] Error 1 make[2]: *** Deleting file '/home/hawk/Desktop/volatility/tools/linux/Module.symvers' make[1]: *** [Makefile:1753: modules] Error 2 make[1]: Leaving directory '/usr/src/linux-headers-5.11.0-41-generic' make: *** [Makefile:10: dwarf] Error 2 }
hawk@hawk-hack:~/Desktop/volatility/tools/linux$ cat /etc/lsb-release DISTRIB_ID=Ubuntu DISTRIB_RELEASE=20.04 DISTRIB_CODENAME=focal DISTRIB_DESCRIPTION="Ubuntu 20.04.3 LTS"
hawk@hawk-hack:~/Desktop/volatility/tools/linux$ hwe-support-status Your Hardware Enablement Stack (HWE) is supported until April 2025.
hawk@hawk-hack:~/Desktop/volatility/tools/linux$ uname -a Linux hawk-hack 5.11.0-41-generic #45~20.04.1-Ubuntu SMP Wed Nov 10 10:20:10 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
hawk@hawk-hack:~/Desktop/volatility/tools/linux$ sudo make -C //lib/modules/5.11.0-41-generic/build CONFIG_DEBUG_INFO=y M="/home/Desktop/volatility/tools/linux" modules
make[1]: Entering directory '/usr/src/linux-headers-5.11.0-41-generic' MODPOST /home/user/volatility/tools/linux/Module.symvers ERROR: modpost: missing MODULE_LICENSE() in /home/Desktop/volatility/tools/linux/module.o make[2]: [scripts/Makefile.modpost:124: /home/Desktop/volatility/tools/linux/Module.symvers] Error 1 (ignored) CC [M] /home/Desktop/volatility/tools/linux/module.mod.o LD [M] /home/Desktop/volatility/tools/linux/module.ko make[1]: Leaving directory '/usr/src/linux-headers-5.11.0-41-generic' dwarfdump -di module.ko > module.dwarf make -C //lib/modules/5.11.0-41-generic/build M="/home/Desktop/volatility/tools/linux" clean make[1]: Entering directory '/usr/src/linux-headers-5.11.0-41-generic' CLEAN /home/Desktop/volatility/tools/linux/Module.symvers make[1]: Leaving directory '/usr/src/linux-headers-5.11.0-41-generic'
hawk@hawk-hack:~/Desktop/volatility/tools/linux$ make -i
~ good luck
@rschmidtz does your output also include
M=""
? That part seems weird to me, it seems that"$(PWD)"
in the Makefile is not resolved correctly. On my test VM it is:$ make make -C //lib/modules/3.2.0-121-generic/build CONFIG_DEBUG_INFO=y M="/tmp/linux" modules make[1]: Entering directory `/usr/src/linux-headers-3.2.0-121-generic' CC [M] /tmp/linux/module.o ...
Can you try running
sed -i 's/PWD/shell pwd/g' Makefile
and rerunmake
?EDIT: Ran into this, they state that $PWD might not necessarily propagated with sudo and to use $(CURDIR) instead.
Thank you very much