Listing 3 presents the simplest LKM.
清单3给出了一个最简单的LKM。
Here's an LKM that supports both reading and writing.
下面是一个可以支持读写的LKM。
This paper analyses the mechanism of LKM backdoor in hiding processes.
分析LKM后门实现隐藏进程的机理。
The standard APIs that are available to kernel programmers are also available to LKM programmers.
内核程序员可以使用的标准API,L KM程序员也可以使用。
But because an LKM can't resolve its symbols until it's loaded into the kernel, the LKM remains an ELF object.
由于必须将lkm加载到内核后lkm才能解析符号,所以LKM仍然是一个ELF对象。
An LKM has some fundamental differences from elements that compile directly into the kernel and also typical programs.
LKM与直接编译到内核或典型程序的元素有根本区别。
A typical program has a main, where an LKM has a module entry and exit function (in version 2.6, you can name these functions anything you wish).
典型的程序有一个main函数,其中LKM包含entry和exit函数(在2.6版本,您可以任意命名这些函数)。
A complete treatment of the APIs is beyond the scope of this article, so I simply present some of the elements that I use later to demonstrate a more useful LKM.
有关API的完整介绍已经超出了本文的范围,因此我们在这里只是简单地介绍后面在展示一个更有用的LKM时所使用的几个元素。
A complete treatment of the APIs is beyond the scope of this article, so I simply present some of the elements that I use later to demonstrate a more useful LKM.
有关API的完整介绍已经超出了本文的范围,因此我们在这里只是简单地介绍后面在展示一个更有用的LKM时所使用的几个元素。
应用推荐