> If it exits using using the exit system call I > can intercept the sys_exit system call but is there a better way of > doing this (without doing a kernel patch)?. Even if the process exits abnormally (due to any signal), kernel does the cleanup by calling do_exit(). -Ravi. __________________________________________________ Do You Yahoo!? Yahoo! - Official partner of 2002 FIFA World Cup http://fifaworldcup.yahoo.com -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/