[sct-hackers] "sys_call_table" unresolved in RH8/9

[<yy...@it...>]

Hello
Nice job and did me a lot of favor.

Although sys_call_table isn't exported on Redhat 8/9, I found this may be a
solution without patch/(re)compile kernel.

http://www.stacken.kth.se/lists/arla-drinkers/2003-05/msg00005.html

The method in "Arla" project is to find some special syscall addresses in
"init_mm" structure, such as sys_read and sys_write. (init_mm, sys_read,
and sys_write are all exported) Then if found, the sys_call_table can be
determined.

I have tested that in syscalltrack project and it seems works.