Re: The disappearing sys_call_table export.

[Jesse Pollard]

On Wednesday 07 May 2003 13:07, petter wahlman wrote:
> On Wed, 2003-05-07 at 18:59, Richard B. Johnson wrote:
>
[snip]
> > The same way you would force a virus to not be statically linked.
> > You make sure that only programs that interface with the kernel
> > thorugh your hooks can run on that particular system.
>
> Can you please elaborate.
> How would you implement the access control without modifying the
> respective syscalls or the system_call(), and would you'r
> solution be possible to implement run time?

Access control is available via the LSM, with well defined interfaces.
If that is what you want to control, then use the LSM, and not the syscall
table.