[nycbug-talk] Understanding sys/module.h , *module_t and *modeventhand_t

[Tim A.]

> Dynamic Kernel Linker (KLD) Facility Programming Tutorial [Intro]
> http://rlz.cl/books/Books/BSD/blueprints.html
>
> I think the second one actually explains that module_t business.

Yes, thank you. That one drops a big hint:

The 'module_t mod' structure is just a pointer to the module structure. 
This structure is part of a linked list of currently loaded modules. It 
contains links to the other modules loaded, KLD ID number and other such 
useful information.


I'd still like to be able to find where that linked list is defined.

I guess I'll just keep reading Rootkits. Considering that hint, I'll 
guess it's addressed later when he starts hiding things.