Hooking a system call.

Ravishankar cyberax82 at gmail.com
Mon Mar 26 11:30:07 EDT 2012


>
> >>how can I make system_call_table address to writable so that one can
> change to >>customized system call.
>
>
> Like this:
      unsigned int level;
      pte_t *pte = lookup_address(sys_call_table, &level);
      if(pte->pte &~ _PAGE_RW) pte->pte |= _PAGE_RW;

An awesome example of pretty much what you're trying to do can be found
here:
https://github.com/fpletz/kernelroll
Enjoy :D
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20120326/d594205d/attachment.html 


More information about the Kernelnewbies mailing list