Elkeid icon indicating copy to clipboard operation
Elkeid copied to clipboard

Published 20 hours ago • verified publisher icon bytedance

compat_execveat hook问题

Open sh1xo opened this issue 2 years ago • 1 comments

https://github.com/bytedance/Elkeid/blob/bff43a7632ff5f015b5d44787688d27e2fab0b6a/driver/LKM/src/smith_hook.c#L3374

.kp.symbol_name = P_GET_COMPAT_SYSCALL_NAME(execveat)

sh1xo avatar Jul 11 '22 14:07 sh1xo

已知问题，正在解决，预计下个版本修复，感谢反馈

EBWi11 avatar Jul 12 '22 03:07 EBWi11

Fixed with https://github.com/bytedance/Elkeid/pull/333

shenping-bd avatar Oct 21 '22 03:10 shenping-bd