From owner-freebsd-hackers Sat Apr 22 13:47: 4 2000 Delivered-To: freebsd-hackers@freebsd.org Received: from facmail.cc.gettysburg.edu (facmail.gettysburg.edu [138.234.4.150]) by hub.freebsd.org (Postfix) with ESMTP id BBE3A37B7C3 for ; Sat, 22 Apr 2000 13:47:00 -0700 (PDT) (envelope-from s467338@gettysburg.edu) Received: from jupiter2 (jupiter2 [138.234.4.6]) by facmail.cc.gettysburg.edu (8.9.3/8.9.3) with SMTP id QAA24863; Sat, 22 Apr 2000 16:46:41 -0400 (EDT) Date: Sat, 22 Apr 2000 16:46:41 -0400 (EDT) From: Andrew Reiter X-Sender: s467338@jupiter2 To: Marco van de Voort Cc: hackers@FreeBSD.ORG Subject: Re: Clone in userland In-Reply-To: <20000422183054.D53EB2E802@hermes.tue.nl> Message-ID: MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="-559023410-851401618-956436401=:10163" Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. ---559023410-851401618-956436401=:10163 Content-Type: TEXT/PLAIN; charset=US-ASCII Marco, Yes..to actually simplify this for myself, I wrote a quick kld that creates a syscall that wraps the pfind() function. Attached is the source to this kld. Andrew On Sat, 22 Apr 2000, Marco van de Voort wrote: | | p2 = pfind(p->p_retval[0]); | --------------------------------------------------------- Andrew Reiter Computer Security Engineer ---559023410-851401618-956436401=:10163 Content-Type: TEXT/PLAIN; charset=US-ASCII; name="procfind.c" Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: LyoNCiAqIHByb2NmaW5kLmMNCiAqDQogKg0KICogRGVzY3JpcHRpb246DQog KiAgIFNpbXBseSBhIHdyYXBwZXIgZm9yIHN0cnVjdCBwcm9jICpwZmluZChw aWRfdCBwaWQpIGtlcm5lbCBmdW5jdGlvbg0KICogICBzbyB0aGF0IHdlIG1h eSBhY2Nlc3MgaXQgZnJvbSB1c2VybGFuZC4gIEZ1bi4NCiAqDQogKg0KICoN CiAqIEFuZHJldyBSZWl0ZXINCiAqIHM0NjczMzhAZ2V0dHlzYnVyZy5lZHUN CiAqIDQvMDANCiAqDQogKi8NCg0KDQojaW5jbHVkZSA8c3lzL3R5cGVzLmg+ DQojaW5jbHVkZSA8c3lzL3BhcmFtLmg+DQojaW5jbHVkZSA8c3lzL3Byb2Mu aD4NCiNpbmNsdWRlIDxzeXMvbW9kdWxlLmg+DQojaW5jbHVkZSA8c3lzL3N5 c2VudC5oPg0KI2luY2x1ZGUgPHN5cy9rZXJuZWwuaD4NCiNpbmNsdWRlIDxz eXMvc3lzdG0uaD4NCiNpbmNsdWRlIDxzeXMvbGlua2VyLmg+DQojaW5jbHVk ZSA8c3lzL3N5c3Byb3RvLmg+DQojaW5jbHVkZSA8c3lzL3N5c2VudC5oPg0K I2luY2x1ZGUgPHN5cy9zeXNjYWxsLmg+DQojaW5jbHVkZSA8c3lzL3N5c2N0 bC5oPg0KI2luY2x1ZGUgPHN5cy9tYWxsb2MuaD4NCiNpbmNsdWRlIDxzeXMv cHRyYWNlLmg+DQojaW5jbHVkZSA8ZXJybm8uaD4NCg0KDQovKiANCiAqIEFy Z3VtZW50cyBwYXNzZWQgaW4gd2hlbiB0aGUgc3lzY2FsbCBpcyBjYWxsZWQu IA0KICoNCiAqLw0KDQpzdHJ1Y3QgcHJvY2ZpbmRfYXJncyB7DQogIHBpZF90 IHBpZDsNCiAgc3RydWN0IHByb2MgKnVwOw0KfTsNCg0KDQoNCnN0YXRpYyBp bnQNCnByb2NmaW5kKHN0cnVjdCBwcm9jICpjdXJwLCBzdHJ1Y3QgcHJvY2Zp bmRfYXJncyAqdWFwKQ0Kew0KICBzdHJ1Y3QgcHJvYyAqa3A7DQogIGludCBl cnIgPSAtMjsNCg0KICBpZiAodWFwLT5waWQgPiAwKSB7DQogICAga3AgPSBw ZmluZCh1YXAtPnBpZCk7DQogICAgaWYgKGtwID09IE5VTEwpDQogICAgICBl cnIgPSBFU1JDSDsJCS8qIE5vIHN1Y2ggcHJvY2VzcyAqLw0KICAgIGVsc2Ug DQogICAgICBlcnIgPSBjb3B5b3V0KGtwLCB1YXAtPnVwLCBzaXplb2Yoc3Ry dWN0IHByb2MpKTsNCiAgfSBlbHNlIA0KICAgIGVyciA9IEVTUkNIOw0KDQog IHJldHVybihlcnIpOyANCn0NCg0Kc3RhdGljIHN0cnVjdCBzeXNlbnQgcHJv Y2ZpbmRfc3lzZW50ID0gew0KICAyLAkJCS8qIG51bWJlciBvZiBhcmd1bWVu dHMgKi8NCiAgcHJvY2ZpbmQJCS8qIGZ1bmN0aW9uIHRoYXQgaXMgb3VyIHN5 c2NhbGwgKi8NCn07DQogDQpzdGF0aWMgaW50IG9mZnNldCA9IE5PX1NZU0NB TEw7IAkvKiBmaW5kIG5leHQgYXZhaWxhYmxlIHNsb3QgKi8NCg0KDQpzdGF0 aWMgaW50IA0KbG9hZChzdHJ1Y3QgbW9kdWxlICptLCAgaW50IGNtZCwgdm9p ZCAqYXJnKQ0Kew0KICBpbnQgZXJyID0gMDsNCiAgDQogIHN3aXRjaChjbWQp IHsNCiAgICBjYXNlIE1PRF9MT0FEOg0KCXByaW50ZigiUHJvY2ZpbmQgc3lz Y2FsbCBsb2FkZWQgYXQgc2xvdCAlZFxuIiwgb2Zmc2V0KTsNCiAgICAgICAg YnJlYWs7DQogICBjYXNlIE1PRF9VTkxPQUQ6DQoJcHJpbnRmKCJQcm9jZmlu ZCBzeXNjYWxsIHVubG9hZGVkIGZyb20gc2xvdCAlZFxuIiwgb2Zmc2V0KTsN CglicmVhazsNCiAgIGRlZmF1bHQ6DQoJZXJyID0gRUlOVkFMOw0KCWJyZWFr Ow0KICB9DQogIHJldHVybihlcnIpOw0KfQ0KDQoNClNZU0NBTExfTU9EVUxF KHByb2NmaW5kLCAmb2Zmc2V0LCAmcHJvY2ZpbmRfc3lzZW50LCBsb2FkLCBO VUxMKTsNCg== ---559023410-851401618-956436401=:10163-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message