Re: ptrace(PTRACE_SYSCALL,...

2001-04-24 Thread diman
Thank you much, procfs events really helps ! To make truss work without procfs mounted, it's easy to cut 1 line of PIOCBIS procfs_ioctl() code and put it to a new PTRACE_SYSCALL ptrace() request - really it is a same things with different names. Then replace all open/read/write/close with resp

Re: ptrace(PTRACE_SYSCALL,...

2001-04-23 Thread Robert Watson
Sounds like this might also be useful to make a procfs-free truss Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL PROTECTED] NAI Labs, Safeport Network Services On Mon, 23 Apr 2001, diman wrote: > > Hello, guys > > I'm porting ltrace to FreeBSD and have one li

ptrace(PTRACE_SYSCALL,...

2001-04-23 Thread diman
Hello, guys I'm porting ltrace to FreeBSD and have one little question. ltrace uses non-standard PTRACE_SYSCALL request, which tells the kernel to stop traced process on every syscall entry and notify the parent. It makes us possible to trace child's syscalls and *catch execve/xfork events* and