Hello Everyone..

The issue is OS (linux) process verification..I have been researching on this topic ,so far i have been able to gather enough information. I am trying to write a linux kernel patch that will verify a scheduled process ,depending on the ip address/port number of the host requesting a service from the kernel(server) of a linux box

My questions are

1)Which files do i need to modify to archive this ?
2) Is it sensible to write an entire patch and recompile the kernel or writing a loadable module ?

Which of the Linux kernal file are you trying to modify? Am sure you can do some edit on the grub file.

System call functions need to be modify ,and in the fucntion i just need to insert some rules for every process to be verified before the call is being made to the kernel...However where the file is what i am looking for....Why do you think i should work on the Grub file?

larryshow4: Which of the Linux kernal file are you trying to modify? Am sure you can do some edit on the grub file.

I thought the grub file is for boot related operations?

incras52: System call functions need to be modify ,and in the fucntion i just need to insert some rules for every process to be verified before the call is being made to the kernel...However where the file is what i am looking for....Why do you think i should work on the Grub file?

Why don't you use the login APIs. The utmp file and the wtmp file. You said that you are trying to verify the process, that means that the process does not originate from your system. The utmp file contains the pid, terminal Id, host name and time of login.