Re: Hooking into Linux using the Linux Trace Toolkit

From: Karim Yaghmour (karymat_private)
Date: Sun Apr 15 2001 - 18:29:14 PDT

  • Next message: Karim Yaghmour: "Re: Benchmarks (was Re: Hooking into Linux using the LTT)"

    Huagang Xie wrote:
    > 
    > The state machine is very interesting, may be we can trace a sequence
    > system call to check if it is illegal or harmful to the system. Like an
    > IDS..;-)..
    
    Definitely a possibility.
    
    > I think the state machin will be very useful to be as a part of
    > "Decider" which phil said..
    
    This is what I originaly had in mind a year ago.
    
    Cheers,
    
    Karim
    
    ===================================================
                     Karim Yaghmour
                   karymat_private
          Embedded and Real-Time Linux Expert
    ===================================================
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Sun Apr 15 2001 - 18:27:33 PDT