On Sun, Jun 08, 2003 at 07:21:35PM +0800, Eugene Teo wrote: > Strange, I get kernel panic when i get the address from System.map. > The address is rather to the low side, I am not sure if this address > can be "used" but when I used the symbol address from /proc/ksyms, > I am able to overwrite the syscall, and it works! :-) Hi, Eugene Teo. Would you mind describing what you're doing? I thought that I understood what you were doing, but now I'm sure I don't. ;) If I were trying to override a system call, I'd write my own implementation and replace the entry in the vector of system call function pointers. -- --Ed L Cashin | PGP public key: ecashin@uga.edu | http://noserose.net/e/pgp/ -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/