On Wed, Mar 06, 2002 at 08:55:20AM -0500, israel fdez wrote: > OK, but I need to verify any thing that intent open, execute or insmod > code in a Linux box, searching for virus, and I need the full path to a > loading module, just as I did with an opening, and executing file. Would > you give any Idea???? You *can't* do this. AFAIK the "name" parameter is an arbitrary string. You're going to have a real job on your hands if you think you can make the kernel robust against a malicious root with capabilities. john -- I am a complete moron for forgetting about endianness. May I be forever marked as such. -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/