LKML Archive on
help / color / mirror / Atom feed
From: Arjan van de Ven <>
To: "Gang He" <>
Subject: Re: OOPS: how to hook system_call_table in redhat es5.1 on x86_64 platform
Date: Sun, 2 Mar 2008 12:04:25 -0800	[thread overview]
Message-ID: <> (raw)
In-Reply-To: <>

On Sun, 2 Mar 2008 09:40:14 +0800
"Gang He" <> wrote:

> Hi,
> as you know, Linux kernel (>2.6.18) set some pages read-only, we can
> not hook system_call_table directly like before, the new source code
> on i386 is


2 items:
1) lkml is not a tutorial list for how to write rootkits
2) you forgot to point to your full source code; hooking the system call table
   is the wrong thing to do, but by not mentioning your (GPL) source code you
   don't give us the option to give you suggestions on how to achieve what you

I would suggest you come back to this mailing list with more context on what you
are trying to achieve including a pointer to the source code.

If you want to reach me at my work email, use
For development, discussion and tips for power savings, 

      reply	other threads:[~2008-03-02 20:04 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-03-02  1:40 Gang He
2008-03-02 20:04 ` Arjan van de Ven [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \ \ \ \ \
    --subject='Re: OOPS: how to hook system_call_table in redhat es5.1 on x86_64 platform' \

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).