> syscall hooking is not in the last portable in the first place. Remeber > you are using a gross hack, and as a result you must suffer the > consequences. > > regards > john > Yes, I know, but sadly there is no way to prevent using such a hack in my case (I am developing a filesystem independent on-access AV driver), so any suggestions to the previously mentioned problems are grately apreciated. I remember hearing about similar problems with DOS TSR's, but have never seen a solution for it. -p. -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/