Analyzing and Extension the Function of Auditing in Linux with LKM
Auditing is a critical part for realizing safety Operating System. The disadvantages of current Linux audit system are analyzed in this paper, and then an example of realizing the function of kernel-level audit system based on LKM is given.