|
From: Sergey V. B. <sa...@bu...> - 2004-04-13 12:18:00
|
Hello where! I have some troubles using syscalltrack: 1) using rules file (in attachment) I have "syscall 4 busy" message. I think it becouse of atfer rule "write_a". 2) using the same rule as above I have trouble unloading modules: sct_hijack: Device or resource busy # lsmod Module Size Used by Not tainted sct_hijack 139296 1 .. Though before it it was shown that modules are not used, only sct_hijack was used by rules. Such situation is only after sct_config upload .. ;cat /dev/sct_log; sct_config delete; If I only do sct_load;sct_unload everything is ok. That all. -- Burchu Sergey |