/g/ - syscall of the day: *_module - Technology

Anonymous

syscall of the day: *_module 04/25/26(Sat)12:47:13 No.108687506

File: 1776131766918618.png (1.05 MB, 1200x900)

syscall of the day: *_module Anonymous 04/25/26(Sat)12:47:13 No.108687506 Archived

previous: >>108677721
#define __NR_create_module            174
#define __NR_init_module            175
#define __NR_delete_module            176
#define __NR_query_module            178
#define __NR_finit_module            313
https://man7.org/linux/man-pages/man2/init_module.2.html
https://man7.org/linux/man-pages/man2/create_module.2.html
https://man7.org/linux/man-pages/man2/delete_module.2.html
https://man7.org/linux/man-pages/man2/query_module.2.html

tl;dr:
kernel modules!

these are pretty neat. we will more or less ignore the create and query syscalls, since they are ancient and no longer supported
but the rest of it is a basic API for interfacing with kernel modules. and proc and sys tell you lots of information about your loaded modules, effectively replacing the query call

have any anons here ever compiled a kernel module before? it's surprisingly easy. if you haven't, maybe look into doing a hello world. it's pretty cool to see your text in dmesg

relevant resources:
man man
man syscalls
https://man7.org/linux/man-pages/
https://linux.die.net/man/
https://elixir.bootlin.com/linux/
https://elixir.bootlin.com/musl/
https://elixir.bootlin.com/glibc/

Anonymous
04/25/26(Sat)12:56:57 No.108687573

Anonymous 04/25/26(Sat)12:56:57 No.108687573

making this into a syscall thread is autistic when the only thing the syscall does is load a driver

Anonymous
04/25/26(Sat)13:26:45 No.108687775

Anonymous 04/25/26(Sat)13:26:45 No.108687775

>>108687573
i'm doing all of them, no matter how useless they are

Anonymous
04/25/26(Sat)13:28:29 No.108687790

Anonymous 04/25/26(Sat)13:28:29 No.108687790

Maybe a retard question but what is the __NR_ prefix there for?

Anonymous
04/25/26(Sat)14:16:39 No.108688156

Anonymous 04/25/26(Sat)14:16:39 No.108688156

>>108687790
i always assumed it meant number
usually they're also redefined as SYS_whatever

Anonymous
04/25/26(Sat)14:19:33 No.108688176

Anonymous 04/25/26(Sat)14:19:33 No.108688176

>>108687506
Why isn't installing a kernel module just ln -s path-to-model /sys/modules/active/my-module?

Anonymous
04/25/26(Sat)14:21:04 No.108688200

Anonymous 04/25/26(Sat)14:21:04 No.108688200

>>108688176
What's stopping you from writing a systemd services that starts an inotify filesystem watcher for changes in that directory and then calls the kernel to load that module? Be the change that you want to see.

Anonymous
04/25/26(Sat)14:28:02 No.108688256

Anonymous 04/25/26(Sat)14:28:02 No.108688256

>>108688200
This is about kernel design, not creating userspace nonsense.
If the query syscall is obsolete because you can just read the virtual filesystem, then installing a module might just as well be a filesystem operation. Unless the init module syscall returns an incredible detailed error or something and it doesn't look like it does, I don't see why they wouldn't do this.
Where's "everything is a file" when it makes sense?

Anonymous
04/25/26(Sat)14:45:31 No.108688398

Anonymous 04/25/26(Sat)14:45:31 No.108688398

File: 1770714578099682.gif (376 KB, 740x859)

376 KB GIF

>>108688156
Why is there a number in the first place

Anonymous
04/25/26(Sat)15:00:13 No.108688507

Anonymous 04/25/26(Sat)15:00:13 No.108688507

>>108688398
how else would select syscalls? using a fucking string? lol

Verification not required.
04/25/26(Sat)19:48:31 No.108690579

Verification not required. 04/25/26(Sat)19:48:31 No.108690579

>>108687775
glorified ioctl thread

Anonymous
04/25/26(Sat)20:03:24 No.108690662

Anonymous 04/25/26(Sat)20:03:24 No.108690662

>>108690579
There are interesting ioctls like TIOCSTI that could be covered, but yeah ioctl(2) by itself is pretty boring. https://www.man7.org/linux/man-pages//man2/TIOCSTI.2const.html

Anonymous
04/25/26(Sat)20:05:12 No.108690669

Anonymous 04/25/26(Sat)20:05:12 No.108690669

>>108688507
Strings are number.

Anonymous
04/25/26(Sat)20:21:18 No.108690768

Anonymous 04/25/26(Sat)20:21:18 No.108690768

kita marriage

Anonymous
04/26/26(Sun)05:30:41 No.108693239

Anonymous 04/26/26(Sun)05:30:41 No.108693239

>>108688256
retard

Anonymous
04/26/26(Sun)05:31:42 No.108693242

Anonymous 04/26/26(Sun)05:31:42 No.108693242

>>108687790
smartest syscall troon.

Anonymous
04/26/26(Sun)05:32:42 No.108693245

Anonymous 04/26/26(Sun)05:32:42 No.108693245

>>108688200
autist

Anonymous
04/26/26(Sun)05:33:43 No.108693247

Anonymous 04/26/26(Sun)05:33:43 No.108693247

>>108690768
based

Anonymous
04/26/26(Sun)07:54:53 No.108693838

Anonymous 04/26/26(Sun)07:54:53 No.108693838

File: 1776579959452803.png (1.19 MB, 1600x950)

1.19 MB PNG

>>108687506
>hello world. it's pretty cool to see your text in dmesg
thanks op. this seems like a pretty cool quick weekend project

Anonymous
04/26/26(Sun)07:57:01 No.108693858

Anonymous 04/26/26(Sun)07:57:01 No.108693858

>>108687506
who's that in the backrooms?

Anonymous
04/26/26(Sun)09:45:12 No.108694597

Anonymous 04/26/26(Sun)09:45:12 No.108694597

>>108688398
because somewhere in memory the kernel stores a list of syscall function addresses, and the number is an offset into that table

Anonymous
04/26/26(Sun)13:11:16 No.108695623

Anonymous 04/26/26(Sun)13:11:16 No.108695623

>>108693858
she is LITERALLY me
>>108693838
let me know how it goes!