Nov. 28, 2011
1:12 a.m.
On Sun, Nov 27, 2011 at 11:17 PM, Jonathan Neuschäfer <j.neuschaefer@gmx.net> wrote:
On Wed, Nov 23, 2011 at 04:40:14PM +0800, Geraint Yang wrote:
Hello everyone,
I am going to hook a system call like 'read' or 'send' by modifying the sys_call_table, but it seems that the sys_call_table is in read only page, how can I set modify the sys_call_table ? Or if there any method that I can use to hook a system call in module without modify the kernel source?
Please keep in mind that hooking a system call is very bad and error prone. -- Thanks, //richard