volatilityfoundation / volatility

An advanced memory forensics framework
http://volatilityfoundation.org/
GNU General Public License v2.0
7.04k stars 1.26k forks source link

Issues creating linux profile for kernel 4.14.35-2047.503.1.el7uek.x86_64 #841

Open ashleykellyforensics opened 1 year ago

ashleykellyforensics commented 1 year ago

I'm attempting to create a Linux Profile for kernel 4.14.35-2047.503.1.el7uek.x86_64. I'm getting the below error. make -C //lib/modules/4.14.35-2047.503.1.el7uek.x86_64/build CONIG_DEBUT_INFO=Y m="/var/tmp/volatility-master/tools/linux" modules make: //lib/modules/4.14.35-2047.503.1.el7uek.x86_64/build: No such file or directory. Stop. Make: [dwarf] Error 2

I've worked with Oracle Support and they noted that there is an issue with volatility creating the profile.

I last downloaded volatility on 2/17/2023 as well.

miszr commented 1 year ago

Based on your error I would say you are missing the package/sources required to build the kernel modules. The build "directory" is commonly a symbolic link to the actual directory that contains the sources.