> It would be less intrusive to the kernel to supply a fixed do_brk()
> and replace the do_brk with a jump to your version.

I've written similar patch few days ago. The patch only modifies first
instructions of do_brk() (it replaces them with jmp to function in LKM.
It can be downloaded from http:/...

[ more ]