On 2008-02-09, Alon Bar-Lev <[EMAIL PROTECTED]> wrote: > What about the syscall and System.map workaround, someone had > suggested this at: http://bugs.gentoo.org/show_bug.cgi?id=207537
One of the problems with syscall hooking is that the kernel development community is actively working to protect the syscall table from being hooked. Red Hat in particular has been working on preventing this since 2002. Every time the kernel is changed, some workaround is found to make it work. It is a "cat and mouse" game that nobody wants to play. Aside from the fact that syscall hooking is technically frowned upon, it is also too much maintenance work for me to be interested. (Syscall hooking support for Linux 2.6 was mostly implemented by various developers from F-Secure and not by me.) > Maybe until 2.6.25 you come up with none LSM solution? The only solution I am interested in is a stackable filesystem. But I am open to accept patches if someone else wants to find some other solution. John Ogness -- Dazuko Maintainer _______________________________________________ Dazuko-devel mailing list [email protected] http://lists.nongnu.org/mailman/listinfo/dazuko-devel
