Messages in this thread | | | Date | Sun, 2 Mar 2008 12:04:25 -0800 | From | Arjan van de Ven <> | Subject | Re: OOPS: how to hook system_call_table in redhat es5.1 on x86_64 platform |
| |
On Sun, 2 Mar 2008 09:40:14 +0800 "Gang He" <hegang.linux@gmail.com> wrote:
> Hi, > > as you know, Linux kernel (>2.6.18) set some pages read-only, we can > not hook system_call_table directly like before, the new source code > on i386 is >
Hi,
2 items: 1) lkml is not a tutorial list for how to write rootkits 2) you forgot to point to your full source code; hooking the system call table is the wrong thing to do, but by not mentioning your (GPL) source code you don't give us the option to give you suggestions on how to achieve what you want.
I would suggest you come back to this mailing list with more context on what you are trying to achieve including a pointer to the source code.
-- If you want to reach me at my work email, use arjan@linux.intel.com For development, discussion and tips for power savings, visit http://www.lesswatts.org
| |