Re: The disappearing sys_call_table export.

Greg KH
2003-05-09T16:33:36Z

On Fri, May 09, 2003 at 10:42:08AM +0300, Muli Ben-Yehuda wrote:
>
> For example, a rogue process is calling settimeofday() on your router
> once a month(!). How are you going to find it? There's no LSM hook for
> settimeofday()

Yes there is. Check the capable hook for CAP_SYS_TIME. LSM modules can
get that info quite easily.

thanks,

greg k-h