Can you stop a system call with Kprobes? I thought it was only used for debugging. Marius
On Tue, Jun 16, 2009 at 2:03 PM, Mulyadi Santosa <mulyadi.sant...@gmail.com>wrote: > On Tue, Jun 16, 2009 at 5:42 PM, Sandu Popa > Marius<sandupopamar...@gmail.com> wrote: > > > >> Is there a way the hook Linux kernel without modifying the > sys_call_table? > > > > This should actually be: > > Is there a way to hook the Linux kernel without modifying the > > sys_call_table? > > Sorry for the brain trauma :). > > I suggest to Google about Kprobe. Probably you need to use kprobe to > intercept sys_mount and sys_umount. > > regards, > > Mulyadi. >
