Hooking exec system call

Christophe Hauser christophe.hauser at supelec.fr
Thu Sep 22 04:50:01 EDT 2011


On Thu, Sep 22, 2011 at 01:53:44PM +0530, Abhijit Pawar wrote:
> hi list,
> Is there any way to hook the exec system call on Linux box apart from 
> replacing the call in System Call table?
> 
> Regards,
> Abhijit Pawar

 
Hi,

you can do that with LSM (CONFIG_SECURITY) using the bprm_set_creds hook (see
include/linux/security.h).

-- 
Christophe



More information about the Kernelnewbies mailing list