Messages in this thread | | | Subject | Re: Reading from file in module fails | Date | Mon, 3 May 2004 18:55:24 +0200 | From | Pascal Schmidt <> |
| |
On Mon, 03 May 2004 14:50:10 +0200, you wrote in linux.kernel:
> That can all be done in userspace. > > $ export LD_PRELOAD=3Dlibcopyfilesbeforemodify.so > > You just need to program a library that provides all functions that > modify files (eg. write, open with O_CREAT, ...) and you're done - 100% > in userspace.
This won't catch asm programs that do syscalls by hand or statically linked programs. If you really need to catch all write accesses, it needs to be done in the kernel, probably as an LSM hook or something.
-- Ciao, Pascal - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |