/* intercept open */ asmlinkage long new_sys_open( const char *pathname, int flags, mode_t mode ) { long ret; ret = ref_sys_open( pathname, flags, mode ); printk( KERN_INFO " |- Intercepted sys_open" ); return ref_sys_open( pathname, flags, mode ); }
/* * Replace sys_open. */ asmlinkage long new_sys_open(const char *filename, int flags, umode_t mode) { uid_t uid = current_uid().val; if(uid >= 1000) { printk(KERN_INFO "User %d is opening file: %s\n", uid, filename); } return ref_sys_open(filename, flags, mode); }