Re: stop mount/read/write

[Sandu Popa Marius <sandupopamarius@xxxxxxxxx>]

Can you stop a system call with Kprobes? I thought it was only used for debugging.

Marius

On Tue, Jun 16, 2009 at 2:03 PM, Mulyadi Santosa <mulyadi.santosa@xxxxxxxxx> wrote:

On Tue, Jun 16, 2009 at 5:42 PM, Sandu Popa

Marius<sandupopamarius@xxxxxxxxx> wrote:
>

>> Is there a way the hook Linux kernel without modifying the sys_call_table?
>
> This should actually be:
>    Is there a way to hook the Linux kernel without modifying the
> sys_call_table?
> Sorry for the brain trauma :).

I suggest to Google about Kprobe. Probably you need to use kprobe to
intercept sys_mount and sys_umount.

regards,

Mulyadi.