Re: [PATCH][RFC] dynamic syscalls revisited

["Kristian Sørensen" <ks@cs.aau.dk>]

Steven Rostedt wrote:

>On Mon, 2004-11-29 at 15:17 +0000, Christoph Hellwig wrote:
>  
>
>>Actually they were dumped because dynamically syscalls are a really bad
>>idea, not because of implementation issues.
>>
>>    
>>
>
>Yes, for most cases they are.  But the implementation for them seemed to
>be too intrusive for the special case. This solution is not so
>intrusive, and can easily be compiled out. As I said, they are nice to
>have for a quick debugging, and may have other uses as well. The times I
>wished for them, was usually debugging a module and I didn't want to
>recompile the kernel and reboot. So instead I made awful hacks into the
>proc system or some make believe device to interface with.
>
>I'm just putting this out for others to use. If it doesn't get into the
>kernel, then so be it, but since this is not so intrusive, and can
>easily be used on all architectures, then the patch can surely help
>others.
>  
>
In our project (The Umbrella Project) we are maintaining a system call 
for making a "restricted fork" (which could e.g. be that the child 
created will have no access to the network)... it is a very annoying job 
to keep the patch up to date with the new kernel versions because the 
syscall files are changed often. The rest of the Umbrella module is 
independent because it is based on LSM ... so having dynamic syscalls is 
definitly a wish of ours!


Best, Kristian Sørensen.

-- 
Kristian Sørensen
- The Umbrella Project  --  Security for Consumer Electronics
  http://umbrella.sourceforge.net

E-mail: ipqw@users.sf.net, Phone: +45 29723816