[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Dazuko-help] RHEL5 x86_64 and syscall hooking?
|
From: |
John Ogness |
|
Subject: |
Re: [Dazuko-help] RHEL5 x86_64 and syscall hooking? |
|
Date: |
Fri, 11 Apr 2008 08:08:35 +0200 |
|
User-agent: |
Gnus/5.11 (Gnus v5.11) Emacs/22.1 (berkeley-unix) |
On 2008-04-11, Bill Lutton <address@hidden> wrote:
> Is there a combination of config options that will allow Dazuko to
> do syscall hooking on RHEL5 x86_64?
The "--enable-syscalls" option will hook the 64-bit system call
table. Dazuko does not support hooking the 32-bit system call table
with a 64-bit kernel.
If your kernel supports 32-bit applications, the 32-bit applications
will not trigger file events in Dazuko.
This might be acceptable for you if, for example, you are only
interested in monitoring Samba shares. As long as the Samba software
is 64-bit, all file events via Samba will be detected by Dazuko.
Dazuko-based applications (such as anti-virus applications) can be
32-bit and will work correctly.
John Ogness
--
Dazuko Maintainer