Re: [Dazuko-devel] Dazuko's 6th birthday (Wiki)

[John Ogness]

On 2008-02-09, Alon Bar-Lev <address@hidden> wrote:
> What about the syscall and System.map workaround, someone had
> suggested this at: http://bugs.gentoo.org/show_bug.cgi?id=207537

One of the problems with syscall hooking is that the kernel
development community is actively working to protect the syscall table
from being hooked. Red Hat in particular has been working on
preventing this since 2002. Every time the kernel is changed, some
workaround is found to make it work. It is a "cat and mouse" game that
nobody wants to play. Aside from the fact that syscall hooking is
technically frowned upon, it is also too much maintenance work for me
to be interested. (Syscall hooking support for Linux 2.6 was mostly
implemented by various developers from F-Secure and not by me.)

> Maybe until 2.6.25 you come up with none LSM solution?

The only solution I am interested in is a stackable filesystem. But I
am open to accept patches if someone else wants to find some other
solution.

John Ogness

-- 
Dazuko Maintainer