I'm writing a module for a class and am having trouble interception sys_execve()... I've intercepted sys_read(), sys_write(), and sys_open() without any trouble; however, sys_execve() is resulting in an Oops. I'm fairly certain I have the function prototype defined correctly.
Hi,
I am using the following kernel module to intercept some syscalls. I have got sys_call_table address from the /boot/System.map.x.x. The module works file on Ubuntu 7.10 (2.6.24) but gets killed upon insmod in Ubuntu 10.04 and Fedora 12 (2.6.32) with error "Kernel paging request error address c0xxxxx [which is, based on System.map, an address in sys_call_table]".