Closed zj1244 closed 6 years ago
在3.10.0-862.14.4.el7.x86_64 下，因没有驱动所以自行编译驱动并加载后，系统自动重启。编译过程中没有报错 [root@localhost test]# uname -a Linux localhost 3.10.0-862.14.4.el7.x86_64 #1 SMP Wed Sep 26 15:12:11 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux [root@localhost ~]# gcc -v 使用内建 specs。 COLLECT_GCC=gcc COLLECT_LTO_WRAPPER=/usr/local/libexec/gcc/x86_64-pc-linux-gnu/7.3.0/lto-wrapper 目标：x86_64-pc-linux-gnu 配置为：../configure --enable-checking=release --enable-languages=c,c++ --disable-multilib 线程模型：posix gcc 版本 7.3.0 (GCC)
日志： Nov 6 16:12:59 localhost kernel: syshook_execve: loading out-of-tree module taints kernel. Nov 6 16:12:59 localhost kernel: syshook_execve: module verification failed: signature and/or required key missing - tainting kernel Nov 6 16:12:59 localhost kernel: Start found sys_call_table. Nov 6 16:12:59 localhost kernel: Found the sys_call_table!!! NR_close[3] sys_close[ffffffffa7e1e240]#012 NR_execve[59] sct[__NR_execve][0xffffffffa8325ce0] Nov 6 16:12:59 localhost kernel: syshook: create netlink success. Nov 6 16:12:59 localhost kernel: Loading module monitor_execve, sys_call_table at ffffffffa8403300
在3.10.0-862.14.4.el7.x86_64 下，因没有驱动所以自行编译驱动并加载后，系统自动重启。编译过程中没有报错 [root@localhost test]# uname -a Linux localhost 3.10.0-862.14.4.el7.x86_64 #1 SMP Wed Sep 26 15:12:11 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux [root@localhost ~]# gcc -v 使用内建 specs。 COLLECT_GCC=gcc COLLECT_LTO_WRAPPER=/usr/local/libexec/gcc/x86_64-pc-linux-gnu/7.3.0/lto-wrapper 目标：x86_64-pc-linux-gnu 配置为：../configure --enable-checking=release --enable-languages=c,c++ --disable-multilib 线程模型：posix gcc 版本 7.3.0 (GCC)
日志： Nov 6 16:12:59 localhost kernel: syshook_execve: loading out-of-tree module taints kernel. Nov 6 16:12:59 localhost kernel: syshook_execve: module verification failed: signature and/or required key missing - tainting kernel Nov 6 16:12:59 localhost kernel: Start found sys_call_table. Nov 6 16:12:59 localhost kernel: Found the sys_call_table!!! NR_close[3] sys_close[ffffffffa7e1e240]#012 NR_execve[59] sct[__NR_execve][0xffffffffa8325ce0] Nov 6 16:12:59 localhost kernel: syshook: create netlink success. Nov 6 16:12:59 localhost kernel: Loading module monitor_execve, sys_call_table at ffffffffa8403300