更新时间:2022-04-23 22:31:21
不,sys_call_table 是固定大小的:
sys_call_table
const sys_call_ptr_t sys_call_table[__NR_syscall_max+1] = { ...
您可能已经发现,您能做的***的事情是拦截现有的系统调用.
The best you can do, as you probably already discovered, is to intercept existing system calls.
Linux内核-通过模块动态添加系统调用
Linux内核 - 通过模块动态添加系统调用