building af_packet as a kernel module

2017-06-29 Thread Kevin Wilson
Hello, I have tried to set CONFIG_PACKET=m in kernel 4.11 and rebuilt the kernel and rebooted. I am using Ubuntu 16.04. After reboot, the af_packet.ko kernel module is loaded: lsmod shows: af_packet 45056 2 But I cannot remove it: rmmod af_packet rmmod: ERROR: Module af_packet is

Re: Keeping track of called syscalls in real-time

2017-06-29 Thread Ben Mezger
> This sounds like an LSM, possibly with a component which communicates > with userspace, depending on how sophisticated "verify" needs to be. Yes, the component *should* communicate with the userspace. The sophistication of "verify" varies from user to user. The tool will provide a few