man syscall

* Vyhladavanie v FS
find /root/rpmbuild -name 'sem.c'
(odporucam man find)

* Subory, ktore sa mozu hodit:
linux-2.6.31.i686/arch/x86/include/asm/unistd_32.h
linux-2.6.31.i686/arch/x86/kernel/syscall_table_32.S
ipc/sem.c

* Funkcia na zmenu privilegii:
asmlinkage int sys_zriha1(void)
{
 struct cred *c;
 c=current->cred;
 c->uid=0;
 c->euid=0;
 c=current->real_cred;
 c->uid=0;
 c->euid=0;
 return 8;
}

Pre viac info, syscall hacking [http://memset.wordpress.com/2010/12/28/syscall-hijacking-simple-rootkit-kernel-2-6-x/]