[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: stop mount/read/write

Can you stop a system call with Kprobes? I thought it was only used for debugging.

Marius

On Tue, Jun 16, 2009 at 2:03 PM, Mulyadi Santosa <mulyadi.santosa@xxxxxxxxx> wrote:
On Tue, Jun 16, 2009 at 5:42 PM, Sandu Popa
Marius<sandupopamarius@xxxxxxxxx> wrote:
>
>> Is there a way the hook Linux kernel without modifying the sys_call_table?
>
> This should actually be:
>    Is there a way to hook the Linux kernel without modifying the
> sys_call_table?
> Sorry for the brain trauma :).

I suggest to Google about Kprobe. Probably you need to use kprobe to
intercept sys_mount and sys_umount.

regards,

Mulyadi.