linux_kmod_syscall_hook. This is simple kernel module can get and replace any linux syscall. Nowadays needs some hacks, on x86 platform. Can be used on ARM and x86 platforms.