[nycbug-talk] Understanding sys/module.h , *module_t and *modeventhand_t
techneck at goldenpath.org
Thu Apr 10 11:06:04 EDT 2008
> Dynamic Kernel Linker (KLD) Facility Programming Tutorial [Intro]
> I think the second one actually explains that module_t business.
Yes, thank you. That one drops a big hint:
The 'module_t mod' structure is just a pointer to the module structure.
This structure is part of a linked list of currently loaded modules. It
contains links to the other modules loaded, KLD ID number and other such
I'd still like to be able to find where that linked list is defined.
I guess I'll just keep reading Rootkits. Considering that hint, I'll
guess it's addressed later when he starts hiding things.
More information about the talk