<p>There are many syscall examples for systemtap at: <a href="http://sourceware.org/systemtap/examples/">http://sourceware.org/systemtap/examples/</a></p>
<div class="gmail_quote">On Mar 26, 2012 6:09 AM, "Mulyadi Santosa" <<a href="mailto:mulyadi.santosa@gmail.com">mulyadi.santosa@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
On Mon, Mar 26, 2012 at 15:14, V.Ravikumar <<a href="mailto:ravikumar.vallabhu@gmail.com">ravikumar.vallabhu@gmail.com</a>> wrote:<br>
> But in my sample module example code for intercepting system call. how can<br>
> I make system_call_table address to writable so that one can change to<br>
> customized system call.<br>
<br>
My memory is a bit rigid about this part, but IIRC it's work of linker<br>
script that put the section that holds syscall table into read-only<br>
section. Not sure if that attribute could be changed on the fly<br>
<br>
--<br>
regards,<br>
<br>
Mulyadi Santosa<br>
Freelance Linux trainer and consultant<br>
<br>
blog: <a href="http://the-hydra.blogspot.com" target="_blank">the-hydra.blogspot.com</a><br>
training: <a href="http://mulyaditraining.blogspot.com" target="_blank">mulyaditraining.blogspot.com</a><br>
<br>
_______________________________________________<br>
Kernelnewbies mailing list<br>
<a href="mailto:Kernelnewbies@kernelnewbies.org">Kernelnewbies@kernelnewbies.org</a><br>
<a href="http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies" target="_blank">http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies</a><br>
</blockquote></div>