> criteria. syscalltrack can operate either in "tweezers mode", where
> only very specific operations are tracked, such as "only track and log
> attempts to delete /etc/passwd", or in strace(1) compatible mode,
> where all of the supported system calls are traced. syscalltrack can
> do things that are impossible to do with the ptrace mechanism, because
> its core operates in kernel space.
What stuff can you do that ptrace can't?
As UML and subterfugue.sf.net shows there's
a *lot* you can do with ptrace.
-- Pavel Written on sharp zaurus, because my Velo1 broke. If you have Velo you don't need...- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/