From szati at entropy.pl Fri Jun 2 15:36:21 2006 From: szati at entropy.pl (Lukasz Sztachanski) Date: Fri Jun 2 15:36:42 2006 Subject: [Systrace] intercepting kvm*() calls Message-ID: <20060602193557.GJ16433@rudy.mif.pg.gda.pl> Hello, Is it *possible* to intercept and `manage' kvm*() activities, especially kvm_getproc2()? If so, on what i should pay attention trying to implement this? - Lukasz Sztachanski -- 0x058B7133 // 16AB 4EBC 29DA D92D 8DBE BC01 FC91 9EF7 058B 7133 http://entropy.pl http://entropy.pl/?blog -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://monkeymail.org/archives/systrace/attachments/20060602/b7fd8972/attachment.bin From provos at citi.umich.edu Fri Jun 2 20:47:42 2006 From: provos at citi.umich.edu (Niels Provos) Date: Fri Jun 2 20:47:45 2006 Subject: [Systrace] intercepting kvm*() calls In-Reply-To: <20060602193557.GJ16433@rudy.mif.pg.gda.pl> References: <20060602193557.GJ16433@rudy.mif.pg.gda.pl> Message-ID: <850f7cbe0606021747t6899937eqab8ef4391badef42@mail.gmail.com> You essentially just need to implement the right translators. Look into systrace-translate.c for examples. Niels. On 6/2/06, Lukasz Sztachanski wrote: > Hello, > > Is it *possible* to intercept and `manage' kvm*() activities, especially > kvm_getproc2()? If so, on what i should pay attention trying to > implement this? > > > - Lukasz Sztachanski > > > -- > 0x058B7133 // 16AB 4EBC 29DA D92D 8DBE BC01 FC91 9EF7 058B 7133 > http://entropy.pl > http://entropy.pl/?blog > > > _______________________________________________ > systrace mailing list > systrace@systrace.org > http://systrace.org/mailman/listinfo/systrace > > > > From deschamps699 at hotmail.com Sat Jun 3 03:24:55 2006 From: deschamps699 at hotmail.com (deschamps georges) Date: Sat Jun 3 03:25:01 2006 Subject: [Systrace] intercepting kvm*() calls In-Reply-To: <850f7cbe0606021747t6899937eqab8ef4391badef42@mail.gmail.com> Message-ID: An HTML attachment was scrubbed... URL: http://monkeymail.org/archives/systrace/attachments/20060603/d7d9e229/attachment.htm