A novel rootkit under linux(test under centos 5.4) combined with preload_inject and sys_table modify (this is a research project denoted in my final undergraduate paper in 2012/7) More infomation could be find in related projects: JynxKit at https://github.com/cccssw/JynxKit kernel beast at http://ipsecs.com
This is an combination of them, make them working together to hide something and expose privilege to you. Without supports.