jvns / kernel-module-fun

Some fun things you can do with kernel modules (all "bad ideas")
MIT License
436 stars 114 forks source link

Can't compile rootkit on linux kernal 3.10 and up #2

Open tahnok opened 9 years ago

tahnok commented 9 years ago

So it looks like proc_dir_entry is no longer defined in linux/proc_fs.h which means rootkit.c won't compile anymore :(

I'm super new to kernal hackery so I don't have a PR to go with my bug report, but I assume the fields accessed in the struct can be accessed in some other way now

jvns commented 9 years ago

Thanks for the report! I've noticed this too, and I'm also not sure how to fix it :)

Theldus commented 8 years ago

Hello, proc_dir_entry is now defined as internal structure, :/.

You can manually copy-paste from this file:http://lxr.free-electrons.com/source/fs/proc/internal.h?v=3.18&raw=1.

The only problem is that this works until to the kernel 3.18, after, pointers to next and subdir are removed from the structure.

jvns commented 8 years ago

this code is unmaintained and I will most likely not fix any bugs. I will accept pull requests for bug fixes, though!