I'd like to catch the system calls that an process is making, so I can
examine the system call and optionally handle it myself. Under
Linux and
Solaris, I can use ptrace() with the PTRACE_SYSCALL command, which
will
let the process run until it enters or exits a system call.
Is there an equivalent for Darwin? Using a KEXT to patch the system
call
table is really not an option...
Doing what you asking to do is really really frowned upon by Apple.
What are you trying to achieve? Just for research?
-Shawn
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/darwin-dev/email@hidden
