[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: trapping execve()



On Mon, May 13, 2002 at 10:33:57PM +0530, Sridhar N wrote:

> 	Reading your FAQ, i just got a bit confused on the how the sys_execve() 
> works, can you elaborate on it ?

If you could tell me which bits are unclear to you explicitly, it would
be very helpful. As I understand it, it's difficult for me to say which
bits are troublesome for you. I acceupt it may not be clear, but I
genuinely need help for details in /why/ it's not clear, and which bits
are troublesome.

> And the part about providing a hook ... I 
> just want to printk the name of the executable and be done with it. Can't it 
> be done in an easier way ?

It depends upon the scope of the college project. Intercepting
sys_execve might be a reasonable solution, or hooking into something
like the Linux Trace Toolkit might be better.

regards
john

-- 
"So what you're saying is "screw the disabled" and you want us to do the
 same ?  No thanks..."
	- Ian Hixie, bug 25537
--
Kernelnewbies: Help each other learn about the Linux kernel.
Archive:       http://mail.nl.linux.org/kernelnewbies/
FAQ:           http://kernelnewbies.org/faq/