Sponsored Content
Top Forums Programming execve notification in user mode under Linux Post 302307370 by otheus on Wednesday 15th of April 2009 07:25:12 AM
Old 04-15-2009
Sort of. You can use LD_PRELOAD to trap the dynamic glibc call to exec, which is what snoopylogger does. However, it is useless against static-compiled programs and programs which make the syscall directly. For these cases, you must write a kernel module that traps the underlying system call.

Under linux, there is an "selinux" module which can do this trapping for you, but I don't know if you can configure it to examine the code in question.
 

10 More Discussions You Might Find Interesting

1. Solaris

adding a user in single user mode

Just got a solaris 8 blade 150 box with no users, only a root account. no one seems to know the password. I'd like to add one user. So I booted into single user mode via cdrom and added one. Can't seem to login using the new account, though. Here's what I'm using: # useradd -d /tmp/"user" -m... (1 Reply)
Discussion started by: ECBROWN
1 Replies

2. UNIX for Advanced & Expert Users

how to install User mode linux

hi everybody, i am trying install user mode linux in Linux kernel 2.6.11(Fedora core) I have open suse file system image for user mode linux n UML binary uml-release-2.6.13.4-bs5.tar. I am doing following steps to install it. in root #mkdir uml in uml directory(empty now) i pasted my... (2 Replies)
Discussion started by: sriram.ec
2 Replies

3. UNIX for Advanced & Expert Users

User Mode Linux

Hi guys, I am working with User Mode Linux (UML) because I have one equipment only and I would like to use it with several servers (web,Mysql,etc) on a virtual system (virtual localhost) using the equipment for personal works at the same time. My system is: Sofware: Debian Sarge 3.1 installed... (0 Replies)
Discussion started by: tiemars
0 Replies

4. UNIX and Linux Applications

User Mode Linux sandbox?

Hi all, Thanks (0 Replies)
Discussion started by: rubberjones
0 Replies

5. UNIX for Dummies Questions & Answers

single user mode - user accounts passwords

hello ppl, someone must be able to help with this --> I have an old NCR tower 32 with an ADDS terminal running a unix version 020102 (Im not sure if thats correct but its unix for sure). I have no user names and no passwords and need to login to read a tape. Is there any way to do that? I hear... (3 Replies)
Discussion started by: orestis
3 Replies

6. SuSE

Convet Linux OS from text mode to graphic mode

Hi All, I used to have my suse linux(VM) server in graphic mode but not anymore since morning. I cant rolback since i loose somuch work. Any idea how to it back to normal. Thanks (6 Replies)
Discussion started by: s_linux
6 Replies

7. Linux

How to run User-mode Linux installed with synaptic package manager in Ubuntu 10.10

I have installed user-mode linux kernel in Ubuntu 10.10 with the help of Synaptic package manager. But I'm not getting how to run it. If we install it manually, we've to run it using the executable binary file. But here, I'm unable to locate any such file. Please help.... Thanking You.... ... (0 Replies)
Discussion started by: rohitadeshmukh1
0 Replies

8. UNIX and Linux Applications

User account expiration notification

Dear Concern, Is there any built in tool/application/command available for Linux user account expiration notification purpose. With Best Regards, Md. Abdullah-Al Kauser (2 Replies)
Discussion started by: makauser
2 Replies

9. Shell Programming and Scripting

Notification of user id creation/deletion

Can someone help me with a shell script that will send an email to a set of email ids when a user id is created or deleted on AIX system. Also, if the script can let the admin know when a particular user id's password will expire. (2 Replies)
Discussion started by: ggayathri
2 Replies

10. Emergency UNIX and Linux Support

User id creation/deletion - notification

Can someone help me with a shell script that will send an email to a set of email ids when a user id is created or deleted on AIX system. Also, if the script can let the admin know when a particular user id's password will expire. (4 Replies)
Discussion started by: ggayathri
4 Replies
CREATE_MODULE(2)					     Linux Programmer's Manual						  CREATE_MODULE(2)

NAME
create_module - create a loadable module entry SYNOPSIS
#include <linux/module.h> caddr_t create_module(const char *name, size_t size); Note: No declaration of this system call is provided in glibc headers; see NOTES. DESCRIPTION
Note: This system call is present only in kernels before Linux 2.6. create_module() attempts to create a loadable module entry and reserve the kernel memory that will be needed to hold the module. This sys- tem call requires privilege. RETURN VALUE
On success, returns the kernel address at which the module will reside. On error, -1 is returned and errno is set appropriately. ERRORS
EEXIST A module by that name already exists. EFAULT name is outside the program's accessible address space. EINVAL The requested size is too small even for the module header information. ENOMEM The kernel could not allocate a contiguous block of memory large enough for the module. ENOSYS create_module() is not supported in this version of the kernel (e.g., the kernel is version 2.6 or later). EPERM The caller was not privileged (did not have the CAP_SYS_MODULE capability). VERSIONS
This system call is present on Linux only up until kernel 2.4; it was removed in Linux 2.6. CONFORMING TO
create_module() is Linux-specific. NOTES
This obsolete system call is not supported by glibc. No declaration is provided in glibc headers, but, through a quirk of history, glibc versions before 2.23 did export an ABI for this system call. Therefore, in order to employ this system call, it was sufficient to manually declare the interface in your code; alternatively, you could invoke the system call using syscall(2). SEE ALSO
delete_module(2), init_module(2), query_module(2) COLOPHON
This page is part of release 4.15 of the Linux man-pages project. A description of the project, information about reporting bugs, and the latest version of this page, can be found at https://www.kernel.org/doc/man-pages/. Linux 2017-09-15 CREATE_MODULE(2)
All times are GMT -4. The time now is 10:52 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy