From mboxrd@z Thu Jan  1 00:00:00 1970
From: christophe.hauser@supelec.fr (Christophe Hauser)
Date: Thu, 22 Sep 2011 18:50:01 +1000
Subject: Hooking exec system call
In-Reply-To: <4E7AF090.6000402@gmail.com>
References: <4E7AF090.6000402@gmail.com>
Message-ID: <20110922085001.GL21550@localhost>
To: kernelnewbies@lists.kernelnewbies.org
List-Id: kernelnewbies.lists.kernelnewbies.org


On Thu, Sep 22, 2011 at 01:53:44PM +0530, Abhijit Pawar wrote:
> hi list,
> Is there any way to hook the exec system call on Linux box apart from 
> replacing the call in System Call table?
> 
> Regards,
> Abhijit Pawar

 
Hi,

you can do that with LSM (CONFIG_SECURITY) using the bprm_set_creds hook (see
include/linux/security.h).

-- 
Christophe