linux-kernel - Re: OOPS: how to hook system_call_table in redhat es5.1 on x86

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20080302120425.00aac7e3@laptopd505.fenrus.org>
Date:	Sun, 2 Mar 2008 12:04:25 -0800
From:	Arjan van de Ven <arjan@...radead.org>
To:	"Gang He" <hegang.linux@...il.com>
Cc:	linux-kernel@...r.kernel.org
Subject: Re: OOPS: how to hook system_call_table in redhat es5.1 on x86_64
 platform

On Sun, 2 Mar 2008 09:40:14 +0800
"Gang He" <hegang.linux@...il.com> wrote:

> Hi,
> 
> as you know, Linux kernel (>2.6.18) set some pages read-only, we can
> not hook system_call_table directly like before, the new source code
> on i386 is
> 

Hi,

2 items:
1) lkml is not a tutorial list for how to write rootkits
2) you forgot to point to your full source code; hooking the system call table
   is the wrong thing to do, but by not mentioning your (GPL) source code you
   don't give us the option to give you suggestions on how to achieve what you
   want.

I would suggest you come back to this mailing list with more context on what you
are trying to achieve including a pointer to the source code.

-- 
If you want to reach me at my work email, use arjan@...ux.intel.com
For development, discussion and tips for power savings, 
visit http://www.lesswatts.org
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/