[Haifux] [Haifux Lecture] User space syscall tracing andmanipulation - fakeroot-ng by Shachar Shemesh

[Muli Ben-Yehuda]

On Thu, Jan 17, 2008 at 02:12:31PM +0200, Shachar Shemesh wrote:

> 1. Automatic manipulation. Unlike strace, fakeroot-ng actually
>    changes the program while running. Unlike gdb, it does so
>    automatically.

When I did this in the past, it was always intimately tied to what the
victim was doing. I'll be very interested in hearing how you got
around it.

> 2. Syscall generation - program calls one syscall, you make it call
>    three.

Interesting... I assume this is without kernel support (e.g., UML's
SKAs patches).

> 3. Recursive debuggers support - run strace (or fakeroot-ng, but at 
> least at the moment not gdb) from within the fakeroot environment.

Fun. Looking forward to the talk.

Cheres,
Muli