Visit Our UNIX and Linux User Community


execve notification in user mode under Linux


 
Thread Tools Search this Thread
Top Forums Programming execve notification in user mode under Linux
# 1  
Old 03-19-2009
execve notification in user mode under Linux

Hi,
I'm writing a monitor program that can be notified once a process makes an execve system call and then stop that process for examining before it starts to run the new code. I know I can ptrace a process to achieve this, but I do not want to ptrace every process in the system. Is it possible? Thanks.
# 2  
Old 04-15-2009
Sort of. You can use LD_PRELOAD to trap the dynamic glibc call to exec, which is what snoopylogger does. However, it is useless against static-compiled programs and programs which make the syscall directly. For these cases, you must write a kernel module that traps the underlying system call.

Under linux, there is an "selinux" module which can do this trapping for you, but I don't know if you can configure it to examine the code in question.

Previous Thread | Next Thread
Test Your Knowledge in Computers #673
Difficulty: Medium
Norman Abramson, a professor at the University of Hawaii, developed the first wireless computer communication network, ALOHAnet.
True or False?

10 More Discussions You Might Find Interesting

1. Emergency UNIX and Linux Support

User id creation/deletion - notification

Can someone help me with a shell script that will send an email to a set of email ids when a user id is created or deleted on AIX system. Also, if the script can let the admin know when a particular user id's password will expire. (4 Replies)
Discussion started by: ggayathri
4 Replies

2. Shell Programming and Scripting

Notification of user id creation/deletion

Can someone help me with a shell script that will send an email to a set of email ids when a user id is created or deleted on AIX system. Also, if the script can let the admin know when a particular user id's password will expire. (2 Replies)
Discussion started by: ggayathri
2 Replies

3. UNIX and Linux Applications

User account expiration notification

Dear Concern, Is there any built in tool/application/command available for Linux user account expiration notification purpose. With Best Regards, Md. Abdullah-Al Kauser (2 Replies)
Discussion started by: makauser
2 Replies

4. Linux

How to run User-mode Linux installed with synaptic package manager in Ubuntu 10.10

I have installed user-mode linux kernel in Ubuntu 10.10 with the help of Synaptic package manager. But I'm not getting how to run it. If we install it manually, we've to run it using the executable binary file. But here, I'm unable to locate any such file. Please help.... Thanking You.... ... (0 Replies)
Discussion started by: rohitadeshmukh1
0 Replies

5. SuSE

Convet Linux OS from text mode to graphic mode

Hi All, I used to have my suse linux(VM) server in graphic mode but not anymore since morning. I cant rolback since i loose somuch work. Any idea how to it back to normal. Thanks (6 Replies)
Discussion started by: s_linux
6 Replies

6. UNIX for Dummies Questions & Answers

single user mode - user accounts passwords

hello ppl, someone must be able to help with this --> I have an old NCR tower 32 with an ADDS terminal running a unix version 020102 (Im not sure if thats correct but its unix for sure). I have no user names and no passwords and need to login to read a tape. Is there any way to do that? I hear... (3 Replies)
Discussion started by: orestis
3 Replies

7. UNIX and Linux Applications

User Mode Linux sandbox?

Hi all, Thanks (0 Replies)
Discussion started by: rubberjones
0 Replies

8. UNIX for Advanced & Expert Users

User Mode Linux

Hi guys, I am working with User Mode Linux (UML) because I have one equipment only and I would like to use it with several servers (web,Mysql,etc) on a virtual system (virtual localhost) using the equipment for personal works at the same time. My system is: Sofware: Debian Sarge 3.1 installed... (0 Replies)
Discussion started by: tiemars
0 Replies

9. UNIX for Advanced & Expert Users

how to install User mode linux

hi everybody, i am trying install user mode linux in Linux kernel 2.6.11(Fedora core) I have open suse file system image for user mode linux n UML binary uml-release-2.6.13.4-bs5.tar. I am doing following steps to install it. in root #mkdir uml in uml directory(empty now) i pasted my... (2 Replies)
Discussion started by: sriram.ec
2 Replies

10. Solaris

adding a user in single user mode

Just got a solaris 8 blade 150 box with no users, only a root account. no one seems to know the password. I'd like to add one user. So I booted into single user mode via cdrom and added one. Can't seem to login using the new account, though. Here's what I'm using: # useradd -d /tmp/"user" -m... (1 Reply)
Discussion started by: ECBROWN
1 Replies

Featured Tech Videos