Lines Matching full:linux
3 # $File: linux,v 1.91 2024/11/09 21:15:48 christos Exp $
4 # linux: file(1) magic for Linux files
6 # Values for Linux/i386 binaries, from Daniel Quinlan <quinlan@yggdrasil.com>
7 # The following basic Linux magic is useful for reference, but using
10 # 2 leshort 100 Linux/i386
16 0 lelong 0x00640107 Linux/i386 impure executable (OMAGIC)
18 0 lelong 0x00640108 Linux/i386 pure executable (NMAGIC)
20 0 lelong 0x0064010b Linux/i386 demand-paged executable (ZMAGIC)
22 0 lelong 0x006400cc Linux/i386 demand-paged executable (QMAGIC)
25 0 string \007\001\000 Linux/i386 object file
27 # Linux-8086 stuff:
28 0 string \01\03\020\04 Linux-8086 impure executable
30 0 string \01\03\040\04 Linux-8086 executable
33 0 string \243\206\001\0 Linux-8086 object file
42 216 lelong 0421 Linux/i386 core file
49 2 string LILO Linux/i386 LILO boot/chain loader
51 # Linux make config build file, from Ole Aamot <oka@oka.no>
53 28 string make\ config Linux make config build file (old)
54 49 search/70 Kernel\ Configuration Linux make config build file
59 # See: https://www.win.tue.nl/~aeb/linux/kbd/font-formats-1.html
60 0 leshort 0x0436 Linux/i386 PC Screen Font v1 data,
66 0 string \x72\xb5\x4a\x86\x00\x00 Linux/i386 PC Screen Font v2 data,
73 # Linux swap and hibernate files
74 # Linux kernel: include/linux/swap.h
75 # util-linux: libblkid/src/superblocks/swap.c
78 0xff6 string SWAP-SPACE Linux old swap file, 4k page size
79 0x1ff6 string SWAP-SPACE Linux old swap file, 8k page size
80 0x3ff6 string SWAP-SPACE Linux old swap file, 16k page size
81 0x7ff6 string SWAP-SPACE Linux old swap file, 32k page size
82 0xfff6 string SWAP-SPACE Linux old swap file, 64k page size
85 0 name linux-swap
101 0xff6 string SWAPSPACE2 Linux swap file, 4k page size,
102 >0 use linux-swap
103 0x1ff6 string SWAPSPACE2 Linux swap file, 8k page size,
104 >0 use linux-swap
105 0x3ff6 string SWAPSPACE2 Linux swap file, 16k page size,
106 >0 use linux-swap
107 0x7ff6 string SWAPSPACE2 Linux swap file, 32k page size,
108 >0 use linux-swap
109 0xfff6 string SWAPSPACE2 Linux swap file, 64k page size,
110 >0 use linux-swap
112 0 name linux-hibernate
120 0xfec string SWAPSPACE2 Linux swap file, 4k page size,
121 >0 use linux-swap
122 >0xff6 use linux-hibernate
123 0x1fec string SWAPSPACE2 Linux swap file, 8k page size,
124 >0 use linux-swap
125 >0x1ff6 use linux-hibernate
126 0x3fec string SWAPSPACE2 Linux swap file, 16k page size,
127 >0 use linux-swap
128 >0x3ff6 use linux-hibernate
129 0x7fec string SWAPSPACE2 Linux swap file, 32k page size,
130 >0 use linux-swap
131 >0x7ff6 use linux-hibernate
132 0xffec string SWAPSPACE2 Linux swap file, 64k page size,
133 >0 use linux-swap
134 >0xfff6 use linux-hibernate
137 # Linux kernel boot images, from Albert Cahalan <acahalan@cs.uml.edu>
143 # Linux kernel boot images (i386 arch) (Wolfram Kleff)
145 514 string HdrS Linux kernel
146 # to display Linux kernel (strength=125=70+55) after VBR boot sector (130=70+60) but before DOS/MBR…
149 # often no extension like in linux, vmlinuz, bzimage or memdisk but sometimes
153 !:mime application/x-linux-kernel
158 # show information about Linux kernel (root, swap device, vga modus, boot protocol, setup size, ini…
173 …memtest32.bin memtest64.bin) 3b0h (memdisk16.bin) 890h (damnsmll.lnx) 3400h (linux64) 3640h (linux)
184 # root_dev; default root device number like 0 301h (/dev/hda1 damnsmll.lnx) 380h (/dev/hd?? linux-e…
201 …2.bin memtest64.bin) 4 (plpbtrom.bin linux-elks) 8 (bootsect.b) 10 (damnsmll.lnx) 25 27 (linux64) …
212 # 0 (plpbtrom.bin) 1270h (linux-elks) 217eh (memtest32.bin) 22deh (memtest64.bin) 2c01h (memtest86+…
216 …lnx) 0x240 (memdisk16.bin) 0x268 (memtest32.bin memtest64.bin ldntldr.bin linux AFTER handover off…
223 # without jump instruction like: 0 (bootsect-lilo-24.2.b EOF!) 0xb8 (mov linux-elks) 0xfa (cli memt…
228 # Boot protocol version; 2.3 (ldntldr.bin damnsmll.lnx) 2.6 (plpbtrom.bin) 2.10 2.11 (linux) 2.12 (…
246 …non-zero contains offset of the protected-mode code to the payload like: cdh (linux) 40dh (linux64)
249 # payload_length; since boot protocol 2.08 the length of the payload like: 452c41h (linux) 6fb644h …
256 # supported compression formats are gzip (magic numbers 1F8B or 1F9E linux) bzip2 (425A), LZMA (5D0…
267 …tldr.bin memdisk16.bin memtest32.bin memtest64.bin plpbtrom.bin) 8000h (damnsmll.lnx linux linux64)
271 # code32_start; address to jump to in protected mode like: 100000h (linux linux64 memtest32.bin mem…
273 … true) like: 0 (plptrom.bin) 1000h (memtest32.bin memtest64.bin) 200000h (linux) 1000000h (linux64)
280 …um alignment required like: 12 (4 KB memtest32.bin memtest64.bin) 13 (8 KB linux) 21 (2 MB linux64)
287 # 0 (damnsmll.lnx ldntldr.bin) 10h (memtest32.bin memtest64.bin) 30h (linux) 190h (linux64) 8e9000b…
303 … of the kernel command line like: 255 (memtest32.bin memtest64.bin) 2047 (linux linux64 plpbtrom);…
314 …d address for kernel like: 100000h (memtest32.bin memtest64.bin) 200000h (linux) 1000000h (linux64)
318 # like: 0h (damnsmll.lnx) 687f8h (memtest32.bin) 6acf8h (memtest64.bin) aa3000h (linux) 2514000h (l…
322 # but also few samples without "HdrS" magic like: bootsect-lilo-24.2.b linux-elks memtest86+.bin
323 # URL: https://tldp.org/HOWTO/Linux-i386-Boot-Code-HOWTO/bootsect.html
324 #0 belong 0xb8c0078e Linux kernel
326 # to display Linux x86 kernel or Linux ELKS Kernel (strength=70=70+0) after VBR boot sector (130=70…
331 >514 default x Linux
333 !:mime application/x-linux-kernel
366 8 search/1 \ A\ _text Linux kernel symbol map text
369 0 search/1 Begin3 Linux Software Map entry text
370 0 search/1 Begin4 Linux Software Map entry text (new format)
373 0 belong 0x4f4f4f4d User-mode Linux COW file
380 # Linux kernel versions
384 #0 string \xb8\xc0\x07\x8e\xd8\xb8\x00\x90 Linux
385 0 string \xb8\xc0\x07\x8e\xd8\xb8\x00\x90foo OLD_VARIANT Linux
446 # Linux boot sector thefts.
448 #0 belong 0xb8c0078e Linux
449 # display "Linux ELKS Kernel" or "Linux style boot sector" (strength=70) after DOS/MBR IPL (115=50+…
452 # https://github.com/jbruchon/elks/releases/download/v0.6.0/fd2880-fat.img/linux
457 # Linux S390 kernel image
459 …\x00\x18\x60\x00\x00\x50\x02\x00\x00\x68\x60\x00\x00\x50\x40\x40\x40\x40\x40\x40\x40\x40 Linux S390
473 # Linux ARM compressed kernel image
510 0x24 lelong 0x016f2818 Linux kernel ARM boot executable zImage
512 0x24 belong 0x016f2818 Linux kernel ARM boot executable zImage
516 # Linux AARCH64 kernel image
517 0x38 lelong 0x644d5241 Linux kernel ARM64 boot executable Image
525 # Linux RISC-V kernel image
526 0x38 string RSC\05 Linux kernel RISC-V boot executable Image
531 # Linux 8086 executable
532 0 lelong&0xFF0000FF 0xC30000E9 Linux-Dev86 executable, headerless
536 0 lelong&0xFF00FFFF 0x4000301 Linux-8086 executable
564 0 string OOOM User-Mode-Linux's Copy-On-Write disk image
567 # SE Linux policy database
569 0 lelong 0xf97cff8c SE Linux policy
575 # Linux Logical Volume Manager (LVM)
583 0x0 string/b HM\001 LVM1 (Linux Logical Volume Manager), version 1
586 0x0 string/b HM\002 LVM1 (Linux Logical Volume Manager), version 2
609 0x218 string/b LVM2\ 001 LVM2 PV (Linux Logical Volume Manager)
612 0x018 string/b LVM2\ 001 LVM2 PV (Linux Logical Volume Manager)
615 0x418 string/b LVM2\ 001 LVM2 PV (Linux Logical Volume Manager)
618 0x618 string/b LVM2\ 001 LVM2 PV (Linux Logical Volume Manager)
659 !:mime application/x-linux-journal
668 # https://man7.org/linux/man-pages/man8/systemd-journald.service.8.html
670 # Magdir/linux, 463: Warning: EXTENSION type ` journal~' has bad char '~'
751 # Linux device tree:
752 # File format description can be found in the Linux kernel sources at
771 # Linux Software RAID (mdadm)
782 4096 lelong 0xa92b4efc Linux Software RAID
786 0 lelong 0xa92b4efc Linux Software RAID
794 # the default version of locate on Arch Linux (and others).
797 # Format docs: https://linux.die.net/man/5/mlocate.db
964 # URL: https://github.com/torvalds/linux/blob/master/tools/perf/util/header.c
966 0 string PERFFILE Linux perf recording, version 1
968 0 lequad 0x32454c4946524550 Linux perf recording, version 2. little endian
970 0 bequad 0x32454c4946524550 Linux perf recording, version 2. big endian