VDM VScode Plugin

VDM Plugin for Visual Studio Code (Python version).

Previous Develop Records

Verify the inotify mechanism (add/update/remove) Add global linked-list for interested comm_name register Complete comm_list call in three hooked syscalls (init with code) Add in-kernel radix tree comm_record for inode pathname recording Add serialization function for struct inode_record ** Add netlink unicast and dump callback in the module Complete netlink function call in the module Complete netlink user space library with easy API Add DKMS compiling

References

1. https://security.stackexchange.com/questions/210897/why-is-there-a-need-to-modify-system-call-tables-in-linux
2. https://stackoverflow.com/questions/2103315/linux-kernel-system-call-hooking-example
3. https://stackoverflow.com/questions/11915728/getting-user-process-pid-when-writing-linux-kernel-module
4. https://uwnthesis.wordpress.com/2016/12/26/basics-of-making-a-rootkit-from-syscall-to-hook/
5. https://stackoverflow.com/questions/58819136/is-it-possible-to-dump-inode-information-from-the-inotify-subsystem