ReadProcessMemory/WriteProcessMemory Linux equivalent?

Hi,

The Win32 Api has the functions ReadProcessMemory and WriteProcessMemory, to read/write the memopry of a certain process.

But I'm a Linux user, and after a lot of searching I can't find equivalent functions that work on Linux.

Do they actually exists, and if so, do I need a library or something?

http://www.linuxmanpages.com/man2/ptrace.2.php

woot thanks a lot!

Btw, is there any function to ge a list of running processes with their pid's?

No, you have to browse the /proc directory.

Just what are you trying to do?

If it's a process that you started, then you can also do "jobs" or some such. Or "ps". ("ps ax" will list ALL processes in the system).

But bear in mind that ptrace only works on processes that you own, unless you are root, so you can't poke around in someone elses processes (which is the same in Windows of course).

--
Mats

Quote:

---

Originally Posted by matsp

If it's a process that you started, then you can also do "jobs" or some such. Or "ps". ("ps ax" will list ALL processes in the system).

But bear in mind that ptrace only works on processes that you own, unless you are root, so you can't poke around in someone elses processes (which is the same in Windows of course).

--
Mats

---

Ok, I think I'll use the ps command then :)

Quote:

---

Originally Posted by CornedBee

No, you have to browse the /proc directory.

Just what are you trying to do?

---

Trying to create a memory viewer/editor for Linux. :)

Quote:

---

Originally Posted by CornedBee

No, you have to browse the /proc directory.

---

If he wants to change the memory of another process, he CAN do it with ptrace(). The alternate method is accessing /proc/xxx/mem, but under many kernels, this access is turned off, or restricted to read-only.

Quote:

---

Originally Posted by brewbuck

If he wants to change the memory of another process, he CAN do it with ptrace(). The alternate method is accessing /proc/xxx/mem, but under many kernels, this access is turned off, or restricted to read-only.

---

He has just to use the program lcap to enable the CAP_SYS_PTRACE capability. This can be done at run time without changing the kernel