Re: Capturing System Calls

[peak () ARGO TROJA MFF CUNI CZ (Pavel Kankovsky)]

On Thu, 22 Jun 2000, Ryan Permeh wrote:

> This doesn't allow you to modify, just monitor, and it is strictly
> noninteractive(ie: you can't break on specific systems calls, etc).

Subterfugue (http://subterfugue.org/) can do virtually anything
(modify syscall parameters, ask a user whether a particular operation is
allowed etc.) but it needs a recent Linux kernel (older implementations of
ptrace() have too many shortcomings).

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."