On Thu, Nov 6, 2008 at 4:01 AM, Jonathan 'Arrouan' ROUZAUD-CORNABAS <arrouan@xxxxxxxxxxxx> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi, > > I'm developping a kernel module that will monitore struct (or something > else) to generate event (or traces) when a process is over (i.e. its PID > disappear from the PID/PPID tree). Currently, I can do that by > monitoring the /proc directory but I am looking for a more robust (and > kernel side) way to do it. > > I don't know where to start, hooking some functions in procfs ? Or > something similar already exists ? Or ... ? > I think It's not good to modify kernel source directly. do_exit function calls proc_exit_connector. so u can use connector You can refer drivers/connector/Kconfig and Documentation/connector/*. -- Kinds regards, MinChan Kim -- To unsubscribe from this list: send an email with "unsubscribe kernelnewbies" to ecartis@xxxxxxxxxxxx Please read the FAQ at http://kernelnewbies.org/FAQ