Messages in this thread | | | From | Kyle Moffett <> | Subject | Re: Q on audit, audit-syscall | Date | Wed, 5 Apr 2006 09:17:13 -0400 |
| |
On Apr 5, 2006, at 08:06:30, Herbert Rosmanith wrote: >> On Wed, Apr 05, 2006 at 01:27:03PM +0200, Herbert Rosmanith wrote: >>> >>> good afternoon, >>> >>> I'm searching for a way to trace/intercept syscalls, both before >>> and after execution. "ptrace" is not an option (you probably know >>> why). >> >> Does strace do what you are asking for? > > as I said, "ptrace" is not an option.
Why not, exactly? (No, we don't know why). ptrace is _the_ Linux mechanism to trace and intercept syscalls. There is no other way.
Cheers, Kyle Moffett
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |