Bad example- fine..... But what about the basic question > What if I want to extend an existing functionality of a syscall? If thats the case, isn't it justified to hook existing syscall/s ? (I hope I am not dragging this too far :) ) Thanks in advance -Shri -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/