shubham0d / Immutable-file-linux

A small fun project to protect a file from writing using ftrace hooking.
MIT License
23 stars 6 forks source link

Not working against simple echo #1

Open orkblutt opened 2 years ago

orkblutt commented 2 years ago

Hi,

I like the idea but a simple echo "text" > /your_immutable_file will bypass your syscall hooks.

All the best,

Orkblutt

shubham0d commented 2 years ago

I am aware about that...will fix it sometime... Probably need to hook vfs rather than syscall.