Re: System call hooking in 2.6 kernel..

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



El Tue, Nov 11, 2008 at 02:01:48PM +0530 sandeep lahane ha dit:

> If I am not missing anything and  if there is libc wrapper provided
> for calls to be trapped then I think this can be done userspace.
> Just write the wrappers for calls to be trapped and and make a shared
> lib out of it, and then do
> a LD_PRELOAD of that lib, or add it to /etc/ld.so.preload.
> 
> So it would look like this,
> 
> app calls func -> func in your wrapper lib -> actual libc func or
> whatever you want to call from you lib.
> This way, you cal trap all calls like open/close etc CMIIW.

the solution you propose was my first thought, but i think it has a
flaw: the user himself could use LD_PRELOAD to circumvent the call to
the wrapper function

-- 
Matthias Kaehlcke
Embedded Linux Engineer
Barcelona

     The assumption that what currently exists must necessarily
      exist is the acid that corrodes all visionary thinking
                                                                 .''`.
    using free software / Debian GNU/Linux | http://debian.org  : :'  :
                                                                `. `'`
gpg --keyserver pgp.mit.edu --recv-keys 47D8E5D4                  `-

--
To unsubscribe from this list: send an email with
"unsubscribe kernelnewbies" to ecartis@xxxxxxxxxxxx
Please read the FAQ at http://kernelnewbies.org/FAQ


[Index of Archives]     [Newbies FAQ]     [Linux Kernel Mentors]     [Linux Kernel Development]     [IETF Annouce]     [Git]     [Networking]     [Security]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux SCSI]     [Linux ACPI]
  Powered by Linux