Intercepting system calls in Linux kernel 2.6.x

Intercepting system calls in Linux kernel 2.6.x

[selvakumar nagendran]

  
 In linux kernel 2.6.x, what should we do to intercept
system calls? When I used sys_call_table from a
module, it returned the following error 'undefined
variable sys_call_table'. What is the way to export
system call table in kernel 2.6.x?

Thanks,
selva


		
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - Helps protect you from nasty viruses. 
http://promotions.yahoo.com/new_mail

Re: Intercepting system calls in Linux kernel 2.6.x

[Valdis.Kletnieks]

[-- Attachment #1: Type: text/plain, Size: 492 bytes --]

On Thu, 23 Dec 2004 20:45:53 PST, selvakumar nagendran said:
>  In linux kernel 2.6.x, what should we do to intercept
> system calls? When I used sys_call_table from a
> module, it returned the following error 'undefined
> variable sys_call_table'. What is the way to export
> system call table in kernel 2.6.x?

That's generally very deprecated.

What problem are you trying to solve by intercepting system calls? There
may very well be some other way to achieve what you're trying to do...

[-- Attachment #2: Type: application/pgp-signature, Size: 226 bytes --]

Re : Re: Intercepting system calls in Linux kernel 2.6.x

[selvakumar nagendran]

Hello,
     I want to save the system call parameters in a
table. I want to do this from the kernel module. For
that, I want to replace the already existing system
call handler by my own. Are there any other mechanisms
for doing this without exporting system call table? If
it is then plz suggest any one of them?

Thanks,
selva
--- Valdis.Kletnieks@vt.edu wrote:

> On Thu, 23 Dec 2004 20:45:53 PST, selvakumar
> nagendran said:
> >  In linux kernel 2.6.x, what should we do to
> intercept
> > system calls? When I used sys_call_table from a
> > module, it returned the following error 'undefined
> > variable sys_call_table'. What is the way to
> export
> > system call table in kernel 2.6.x?
> 
> That's generally very deprecated.
> 
> What problem are you trying to solve by intercepting
> system calls? There
> may very well be some other way to achieve what
> you're trying to do...
> 

> ATTACHMENT part 2 application/pgp-signature 




		
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - now with 250MB free storage. Learn more.
http://info.mail.yahoo.com/mail_250

Re: Re : Re: Intercepting system calls in Linux kernel 2.6.x

[Arjan van de Ven]

On Thu, 2004-12-23 at 22:09 -0800, selvakumar nagendran wrote:
> Hello,
>      I want to save the system call parameters in a
> table. I want to do this from the kernel module. For
> that, I want to replace the already existing system
> call handler by my own. Are there any other mechanisms
> for doing this without exporting system call table? If
> it is then plz suggest any one of them?

ewww

if you do this for auditing purposes... who not use the auditing
subsystem that is already there ?