Linux Kernel: System call hooking example
I finally found the answer myself. http://www.linuxforums.org/forum/linux-kernel/133982-cannot-modify-sys_call_table.html The kernel was changed at some point so that the system call table is read only. cypherpunk: Even if it is late but the Solution may interest others too: In the entry.S file you will find: Code: .section .rodata,”a” #include “syscall_table_32.S” sys_call_table -> ReadOnly You have to compile … Read more