Categories
LibSysCtr
LibSysCTr intercepts system call functions on a GNU/Linux system. Process monitoring and sandboxing are just two of its potential uses. LibSysCTr uses the ptrace(2) functionalities by monitoring and reporting events to the library caller. LibSysCTr is callback driven, which means the user initializes the library with systr_init_library(), registers the system calls he wants to monitor with systr_trace_syscall(), and calls systr_run() to start receiving events in the form of callback invocation.
For each intercepted system call, two calls to the registered callback function are performed: one during the system call entry, before the system call iteself will be executed by the kernel, and one after the kernel has processed the system call (right before returning the userspace). Utility functions are supplied to, retrieve information about the process, get/set the system call parameters, and read/write the monitored process address space.
Last updated 21 May, 2004
Versions
0.2
0.2 beta released 2004-05-21
- Released: 21 May, 2004
- Code Maturity: Beta
- Source Archive: http://www.xmailserver.org/libsysctr-0.2.tar.gz
- Licenses: LGPLv2.1orlater
- Interfaces: Library




