hi list... I am intercepting the system calls in solaris using /proc. I could stop the process at the ENTRY (into the kernel) whenever it makes "open" syscall. But to patch up the syscall and return it back to user mode what all should be done? Where can I get the info about it? Piece of related code will help a lot. Help! Thanks, Imtiaz. -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/