On Mon, Jun 23, 2003 at 10:27:05AM +0300, Koby Horesh wrote: > Hi all, > > I seem to have a problem. I have a code which traps the sys_exit call in > order to know about > terminating threads . I've heard about this missing since 2.4.20 above, but is not a problem hijack system call or call unexported symbol from our module. for call unexported symbol, you should declare a static function pointer or variable pointer and assign in them him real address in kernel memory (listed on System.map file). for make syscall substitution you should adressing sys_call_table from System.map information and act in them, or you should use one special tech exposed from silvio cesare, for substitute function without exported symbol and not only related for system call, hime sit is http://www.big.net.au/~silvio happy coding! :) vecna
Attachment:
pgp00456.pgp
Description: PGP signature
