From edcfda068836672fa14dda83778a04b91f4a87b1 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Mon, 17 Jul 2017 22:51:42 +0100 Subject: [PATCH] Change the stacking order, to ensure Lime gets loaded before linux. --- volatility/framework/automagic/linux.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility/framework/automagic/linux.py b/volatility/framework/automagic/linux.py index 1378af81d..c29a32a79 100644 --- a/volatility/framework/automagic/linux.py +++ b/volatility/framework/automagic/linux.py @@ -68,7 +68,7 @@ class LinuxSymbolFinder(interfaces.automagic.AutomagicInterface): class LintelStacker(interfaces.automagic.StackerLayerInterface): linux_signature = b"SYMBOL\(swapper_pg_dir\)=.*" - stack_order = 9 + stack_order = 12 @classmethod def stack(cls, context, layer_name, progress_callback = None):