<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
X-Sender: [EMAIL PROTECTED]
Received: from chello089079223139.chello.pl [89.79.223.139] with HTTP/1.1
(POST); Wed, 12 Nov 2008 13:56:41 +0100
User-Agent: RoundCube Webmail/0.1
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
BTW:
Myself I'm trying to hook execve syscall, but I have problems with it. What
I need is after calling execve by user program just do a simple check of
file name (by kernel - strstr) and then proceed to normal execution.
Without debug registers.
Any hints would be greatly appreciated.
Or maybe someone would direct me to some up to date introductory material
about kernel space / user space transition ?
Big thanks,
--
Regards,
Lech
--
To unsubscribe from this list: send an email with
"unsubscribe kernelnewbies" to [EMAIL PROTECTED]
Please read the FAQ at http://kernelnewbies.org/FAQ
