Command to pass the address of sys_call_table to a module

appas · 07-22-2004, 08:33 AM

Hi,

I am writing a linux module which should intercept File system calls. I am trying to use sys_call_table which is not exported in my kernel 2.4.20 version.
I have an alternate to overcome the above problem by passing the address of sys_call_table obtained from System.map.I want to know how to pass the address of sys_call_table and assign the same to local variable in my module.

infamous41md · 07-22-2004, 12:13 PM

overwriting function pointers in table is not very reliable, better to use function hijacking. http://www.u-e-b-i.com/silvio/kernel-hijack.txt but if u want to pass params to a module, see here: http://www.xml.com/ldd/chapter/book/ch02.html#t6

appas · 07-23-2004, 01:52 AM

Thank you and it works but when i include some printk statements in the code, the output was not written to the /var/log/messages sometimes. Is there any specific reason for this kind of behaviour.

infamous41md · 07-23-2004, 12:30 PM

other than the obvious, is you syslog configured to output properly, i donno...