Putting the Kernel on your side
Source: Security Protocols
Linux enables (as most of you know) run-time module loading, that is : you can had features to your linux kernel without having to re-compile the whole kernel again. You can write and load modules that will be linked to the kernel. This paper is about how to use modules in order to help you in administrating your system. This modules can trace syscalls , that is when someone invokes an application that issues a syscall your module can change the behavior of the application based on some arguments , lets 've a closer look.
