Re: Overriding System Calls



Prafulla T wrote:
What should I do now?
Is is possible at all to do it?

1. Modify the kernel source to directly include your own system call
code.

2. Modify the kernel source to export the sys_call_table symbol. (Of
course, your modification won't ever make it into the official kernel
source tree but if you're just trying to learn...)

3. Figure out how to dynamically locate the sys call table from your
loadable module. (This is ugly and I don't recommend it, but it
certainly seems feasible. Hint: where in kernel memory could you find a
block of 230+ consecutive words, each of which contains a valid kernel
virtual address?)

GH

.



Relevant Pages