kernel-module-fun icon indicating copy to clipboard operation
kernel-module-fun copied to clipboard

Published 20 hours ago • verified publisher icon jvns

Can't compile rootkit on linux kernal 3.10 and up

Open tahnok opened this issue 10 years ago • 3 comments

So it looks like proc_dir_entry is no longer defined in linux/proc_fs.h which means rootkit.c won't compile anymore :(

I'm super new to kernal hackery so I don't have a PR to go with my bug report, but I assume the fields accessed in the struct can be accessed in some other way now

tahnok avatar Mar 16 '15 01:03 tahnok

Thanks for the report! I've noticed this too, and I'm also not sure how to fix it :)

jvns avatar Mar 16 '15 14:03 jvns

Hello, proc_dir_entry is now defined as internal structure, :/.

You can manually copy-paste from this file:http://lxr.free-electrons.com/source/fs/proc/internal.h?v=3.18&raw=1.

The only problem is that this works until to the kernel 3.18, after, pointers to next and subdir are removed from the structure.

Theldus avatar May 29 '16 04:05 Theldus

this code is unmaintained and I will most likely not fix any bugs. I will accept pull requests for bug fixes, though!

jvns avatar May 29 '16 07:05 jvns