diff --git a/doc/dev_journal.md b/doc/dev_journal.md index 5c19c56..90868ea 100644 --- a/doc/dev_journal.md +++ b/doc/dev_journal.md @@ -177,4 +177,4 @@ All in all, the main functionality works as intended. Basically now would be the ## Wednesday, 7, June 2023 ### Michel -I have written 2 systemtap scripts, that can detect, whenever a module registers at the Keyboard-notifier. The Script can currently detect whenever a module registers. However, neither of them can detect which kernel module registered. Here comes Sebastians idea of writing a python script, that can unload all un-known modules and loads them back in, whilst the stap-script is running. Whenever a module is loaded in, and it triggers the stap-script, we know it is tracking key-strokes. Those modules will be shown to the user and the user then has to decide whether to unload and remove them, or keep them. +I have written 1 systemtap scripts, that can detect, whenever a module registers at the Keyboard-notifier. The Script can currently detect whenever a module registers. However, it can not detect which kernel module registered. Here comes Sebastians idea of writing a python script, that can unload all un-known modules and loads them back in, whilst the stap-script is running. Whenever a module is loaded in, and it triggers the stap-script, we know it is tracking key-strokes. Those modules will be shown to the user and the user then has to decide whether to unload and remove them, or keep them. I got the idea for the short-script from redheat. The readhat-script is called funcall-tracer2.stp . My script is symplified for the work with python.