You will need root access, but I posted code to find the syscall table (which you could then use to hook system calls and monitor them) on www.upche.org/doku.php?id=wiki:rootkit. The original post was a good method when it worked in previous android versions, but it didn't work for me. I wrote my more generalized method that uses the software interrupt handler to find the syscall table as a comment there.
Check it out and let me know if it works for you. -Bob On Apr 27, 9:02 am, Frank Su <[email protected]> wrote: > I just want to monitor the behavior of the android system, like the > keyboard click event, UI display event, SMS event, etc. > So i need a way to monitor the different system methods. It seems that > the sdk does not provide the API to implement it. > So, that's my question, which part of source code should I refer, to > monitor the system method like keyboard been pressed, a message-UI > been displayed...have been called. > > -- > Subscription > settings:http://groups.google.com/group/android-security-discuss/subscribe?hl=en
