mirror of
https://github.com/adulau/aha.git
synced 2024-12-05 00:17:23 +00:00
Some random notes
This commit is contained in:
parent
7ce1919c2f
commit
56df953f17
1 changed files with 24 additions and 0 deletions
24
README.gerard
Normal file
24
README.gerard
Normal file
|
@ -0,0 +1,24 @@
|
|||
Adaptive Honeypot Alternative -- AHA
|
||||
|
||||
This should become an adaptive honeypot framework
|
||||
|
||||
Some kernel development notes
|
||||
* Inside kernel space no variables in user space can be directly accessed
|
||||
* strncpy_from_user and similar functions can be used to copy data
|
||||
* This should not be done in critical sections; page faults may occour
|
||||
and wonderfull kernel deadlocks emerge
|
||||
|
||||
* Honeypot support is already in the kernel (UML)
|
||||
* Compile kernel including hppfs support
|
||||
* Inside the UML directory containing root_fs create a proc directory,
|
||||
denoted proc' here
|
||||
* Inside the UML mount proc file system with
|
||||
mount none /proc -t hppfs
|
||||
* Everything is normal inside the proc filesystem. However in the proc
|
||||
proc' entries can be overriden, i.e cmdline contains foo bar
|
||||
* If a subdirectory (d) in proc' contains an empty file called remove
|
||||
then (d) is not shown inside the UML
|
||||
|
||||
TODO
|
||||
PAGE_SIZE constant -> allocate efficiently buffers
|
||||
* IDEA extend hppfs for adaption
|
Loading…
Reference in a new issue