From mboxrd@z Thu Jan  1 00:00:00 1970
From: cyberax82@gmail.com (Ravishankar)
Date: Mon, 26 Mar 2012 21:00:07 +0530
Subject: Hooking a system call.
In-Reply-To: <CA+CftcGKroq9U2CU6YwQGGFRhd6s99-AhpGmz9JTm+C=VkuhVw@mail.gmail.com>
References: <CA+CftcHQhzN2apM5hrrgN=_gZSZjL3znqdLx6YhT6TJksM3V1Q@mail.gmail.com>
	<CAGdaadaJerz7PgXt-tzJmpPoK6MdefQVRXxzPyYV_2Q=ffmQ8Q@mail.gmail.com>
	<CA+CftcGKroq9U2CU6YwQGGFRhd6s99-AhpGmz9JTm+C=VkuhVw@mail.gmail.com>
Message-ID: <CAO_LctT5bJYfxcQLKr6pACryLUg4KCWxzK1jhnk4==ufnwebOg@mail.gmail.com>
To: kernelnewbies@lists.kernelnewbies.org
List-Id: kernelnewbies.lists.kernelnewbies.org

>
> >>how can I make system_call_table address to writable so that one can
> change to >>customized system call.
>
>
> Like this:
      unsigned int level;
      pte_t *pte = lookup_address(sys_call_table, &level);
      if(pte->pte &~ _PAGE_RW) pte->pte |= _PAGE_RW;

An awesome example of pretty much what you're trying to do can be found
here:
https://github.com/fpletz/kernelroll
Enjoy :D
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20120326/d594205d/attachment.html