Re: Q on audit, audit-syscall

[Kyle Moffett]

On Apr 5, 2006, at 08:06:30, Herbert Rosmanith wrote:
> > On Wed, Apr 05, 2006 at 01:27:03PM +0200, Herbert Rosmanith wrote:
> > > good afternoon,
> > >
> > > I'm searching for a way to trace/intercept syscalls, both before  
> > > and after execution. "ptrace" is not an option (you probably know  
> > > why).
> >
> > Does strace do what you are asking for?
>
> as I said, "ptrace" is not an option.

Why not, exactly?  (No, we don't know why).  ptrace is _the_ Linux  
mechanism to trace and intercept syscalls.  There is no other way.

Cheers,
Kyle Moffett

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/