请求高手给出一个系统调用替换能运行的例子

liuxuejin

本人使用的内核版本是2.6.31-20-generic，请求高手给出一个系统调用替换的例子，我的系统是 UBUNTU！谢谢了本人在网上找到的全不都不能运行的！

Godbach

既然你网上找到都不能用，那又怎么保证现在给你一个你能用呢。其实个人觉得是个内核版本有关了。

如果你想测试劫持系统调用，那么可以先找一个例子，在人家测试的版本上先看看能不能用。

我之前写过一个系统调用劫持的总结，其中的程序能在2.6.18.3的内核上成功执行。

aaaaa5aa

去UBUNTU论坛下载官方文档去

liuxuejin

回复 2# Godbach

/home/liuxuejin/import/hackopen/hack_open.c:33: error: expected declaration specifiers or ‘...’ before string constant
/home/liuxuejin/import/hackopen/hack_open.c:33: warning: data definition has no type or storage class
/home/liuxuejin/import/hackopen/hack_open.c:33: warning: type defaults to ‘int’ in declaration of ‘ODULE_DESCRIPTION’
/home/liuxuejin/import/hackopen/hack_open.c:33: warning: function declaration isn’t a prototype
/home/liuxuejin/import/hackopen/hack_open.c:35: error: expected declaration specifiers or ‘...’ before string constant
/home/liuxuejin/import/hackopen/hack_open.c:35: warning: data definition has no type or storage class
/home/liuxuejin/import/hackopen/hack_open.c:35: warning: type defaults to ‘int’ in declaration of ‘ODULE_AUTHOR’
/home/liuxuejin/import/hackopen/hack_open.c:35: warning: function declaration isn’t a prototype
/home/liuxuejin/import/hackopen/hack_open.c:37: error: expected declaration specifiers or ‘...’ before string constant
/home/liuxuejin/import/hackopen/hack_open.c:37: warning: data definition has no type or storage class
/home/liuxuejin/import/hackopen/hack_open.c:37: warning: type defaults to ‘int’ in declaration of ‘ODULE_LICENSE’
/home/liuxuejin/import/hackopen/hack_open.c:37: warning: function declaration isn’t a prototype
/home/liuxuejin/import/hackopen/hack_open.c:53: error: expected declaration specifiers or ‘...’ before string constant
/home/liuxuejin/import/hackopen/hack_open.c:53: error: expected declaration specifiers or ‘...’ before ‘(’ token
/home/liuxuejin/import/hackopen/hack_open.c:53: error: expected declaration specifiers or ‘...’ before numeric constant
/home/liuxuejin/import/hackopen/hack_open.c:53: error: stray ‘##’ in program
/home/liuxuejin/import/hackopen/hack_open.c:53: error: expected declaration specifiers or ‘...’ before ‘args’
/home/liuxuejin/import/hackopen/hack_open.c:53: warning: data definition has no type or storage class
/home/liuxuejin/import/hackopen/hack_open.c:53: warning: type defaults to ‘int’ in declaration of ‘printk’
/home/liuxuejin/import/hackopen/hack_open.c:53: warning: function declaration isn’t a prototype
/home/liuxuejin/import/hackopen/hack_open.c:53: error: conflicting types for ‘printk’
/home/liuxuejin/import/hackopen/hack_open.c:53: note: a parameter list with an ellipsis can’t match an empty parameter name list declaration
include/linux/kernel.h:240: note: previous declaration of ‘printk’ was here
/home/liuxuejin/import/hackopen/hack_open.c: In function ‘new_execve’:
/home/liuxuejin/import/hackopen/hack_open.c:499: error: implicit declaration of function ‘getname’
/home/liuxuejin/import/hackopen/hack_open.c:499: error: ‘struct pt_regs’ has no member named ‘ebx’
/home/liuxuejin/import/hackopen/hack_open.c:499: warning: assignment makes pointer from integer without a cast
/home/liuxuejin/import/hackopen/hack_open.c:511: error: ‘struct pt_regs’ has no member named ‘ecx’
/home/liuxuejin/import/hackopen/hack_open.c:513: error: ‘struct pt_regs’ has no member named ‘edx’
/home/liuxuejin/import/hackopen/hack_open.c:529: error: implicit declaration of function ‘putname’
/home/liuxuejin/import/hackopen/hack_open.c: In function ‘intercept_init’:
/home/liuxuejin/import/hackopen/hack_open.c:557: error: stray ‘##’ in program
/home/liuxuejin/import/hackopen/hack_open.c:557: error: ‘__NR_’ undeclared (first use in this function)
/home/liuxuejin/import/hackopen/hack_open.c:557: error: (Each undeclared identifier is reported only once
/home/liuxuejin/import/hackopen/hack_open.c:557: error: for each function it appears in.)
/home/liuxuejin/import/hackopen/hack_open.c:557: error: expected ‘]’ before ‘x’
/home/liuxuejin/import/hackopen/hack_open.c:557: error: stray ‘##’ in program
/home/liuxuejin/import/hackopen/hack_open.c:557: error: ‘new_’ undeclared (first use in this function)
/home/liuxuejin/import/hackopen/hack_open.c:557: error: expected ‘;’ before ‘x’
make[2]: *** [/home/liuxuejin/import/hackopen/hack_open.o] 错误 1
make[1]: *** [_module_/home/liuxuejin/import/hackopen] 错误 2
make[1]:正在离开目录 `/usr/src/linux-headers-2.6.31-20-generic'
make: *** [default] 错误 2

liuxuejin

到底什么时候错误，我估计是我粘贴的时候 ，多粘贴了什么

lion4212

回复 5# liuxuejin


    我擦，楼主，直接粘的有好多问题的好不？

wayling

2.6.31应该很多,就等有缘人赠送吧

huqinwei987

粘贴人家的MODULE粘贴丢了M,太明显了

chenliangmoran

你这完全是编译错误呀！
看看8L的答复