Re: detecting system call rediretion
From: Jem Berkes (jb_at_users.pc9.org)
Date: 03/19/04
- Next message: Ed: "suspicious log entry"
- Previous message: jealous xmp: "Re: Kernel options for server use"
- In reply to: Karthik: "detecting system call rediretion"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 19 Mar 2004 02:02:56 GMT
> How can i detect any system call redirection ?, i would like to do
> this from within the kernel itself using a kernel thread or something
> like that.
I don't quite know what you mean by system call redirection... there are
several kernel system calls that act as wrappers to others. For instance,
when you do a fork() I believe this call comes through clone(). These are
legitimate syscall redirections...
-- Jem Berkes http://www.sysdesign.ca/
- Next message: Ed: "suspicious log entry"
- Previous message: jealous xmp: "Re: Kernel options for server use"
- In reply to: Karthik: "detecting system call rediretion"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
