Re: Ответ: KLD loading, liking

2008-11-18 Thread Alexej Sokolov
On Mon, Nov 17, 2008 at 09:43:44PM +0100, Ed Schouten wrote: > * Aleksandr Litvinov <[EMAIL PROTECTED]> wrote: > > Hello, > > You can receive a little information about KLD from the book > > "designing BSD rootkits". > > I don't own this book myself, but a colleague at Snow B.V. once showed > it

Re: Ответ: KLD loading, liking

2008-11-17 Thread Ed Schouten
* Aleksandr Litvinov <[EMAIL PROTECTED]> wrote: > Hello, > You can receive a little information about KLD from the book > "designing BSD rootkits". I don't own this book myself, but a colleague at Snow B.V. once showed it to me. I only looked through it a couple of minutes, but it seemed like a b

Re: KLD loading, liking

2008-11-17 Thread Alexandre Fiveg
On Mon, Nov 17, 2008 at 02:34:28PM +0100, Dag-Erling Smørgrav wrote: > Alexej Sokolov <[EMAIL PROTECTED]> writes: > > Not only that. The use of the MODULE_DEPEND macro allows one module to > > access the variables of modules on which it depends. > > No. Any module X can access any public variable

Ответ: KLD loading, liking

2008-11-17 Thread Aleksandr Litvinov
2008/11/17, Alexej Sokolov <[EMAIL PROTECTED]>: > On Sun, Nov 16, 2008 at 11:09:00AM +0100, Ed Schouten wrote: >> * Alexej Sokolov <[EMAIL PROTECTED]> wrote: > >> > What exact does the macro MODULE_DEPEND ? The man page is to short, and >> > I >> > guess it tell no all things that the macro does. >

Re: KLD loading, liking

2008-11-17 Thread Dag-Erling Smørgrav
Alexej Sokolov <[EMAIL PROTECTED]> writes: > Not only that. The use of the MODULE_DEPEND macro allows one module to > access the variables of modules on which it depends. No. Any module X can access any public variable or function in the kernel or in any other module Y, but loading X will fail if

Re: KLD loading, liking

2008-11-17 Thread Alexej Sokolov
On Sun, Nov 16, 2008 at 11:09:00AM +0100, Ed Schouten wrote: > * Alexej Sokolov <[EMAIL PROTECTED]> wrote: > > What exact does the macro MODULE_DEPEND ? The man page is to short, and I > > guess it tell no all things that the macro does. > > MODULE_DEPEND is used to say: this kernel module also d

Re: KLD loading, liking

2008-11-16 Thread Ed Schouten
* Alexej Sokolov <[EMAIL PROTECTED]> wrote: > sysinit_set -contain a structure with a pointer to function which will be > called by loading of KLD When you place SYSINIT() lines in your code, you can request functions to be called when the code is loaded. There are also some macro's such as MTX_SY

KLD loading, liking

2008-11-15 Thread Alexej Sokolov
Hello, i am looking for some infos (may be papers) about how KLD linker works. After kompiling the KLD contain two important sections: % readelf -S mymod.ko | grep set [ 7] set_sysinit_set PROGBITS0560 000560 04 00 A 0 0 4 [ 8] set_modmetadata_s PROGBITS0564 00056