[Haifux] [Haifux Lecture] User space syscall tracing and manipulation - fakeroot-ng by Shachar Shemesh

2008-01-17 Thread Orr Dunkelman
Next Monday, 21th of Janaury, at 18:30 the Haifa Linux Club, will gather to Shachar Shemesh's lecture about User space syscall tracing and manipulation - fakeroot-ng Abstract Various techniques will be shown for wrapping another program's system calls. All techniques employ

Re: [Haifux] [Haifux Lecture] User space syscall tracing andmanipulation - fakeroot-ng by Shachar Shemesh

2008-01-17 Thread arbel yossi
Hi, It is not clear from this post whether the lecture will deal with fakeroot-ng or not. The Abstract talks about various techniques but does not mention fakeroot-ng, while the title includes both. Regards, Yossi -Original Message- From: [EMAIL PROTECTED] on behalf of Orr Dunkelman

Re: [Haifux] [Haifux Lecture] User space syscall tracing andmanipulation - fakeroot-ng by Shachar Shemesh

2008-01-17 Thread Shachar Shemesh
arbel yossi wrote: Hi, It is not clear from this post whether the lecture will deal with fakeroot-ng or not. The Abstract talks about various techniques but does not mention fakeroot-ng, while the title includes both. Regards, Yossi Fakeroot-ng is a (as far as I know) first attempt to do

Re: [Haifux] [Haifux Lecture] User space syscall tracing andmanipulation - fakeroot-ng by Shachar Shemesh

2008-01-17 Thread arbel yossi
I think I even gave a haifux talk on run-time modification of programs using ptrace for fun an profit a few years ago. There is surely a profit and a lot of fun around here, but indeed there was a ptrace - Playing Debugger Chess lecture by you, http://www.haifux.org/lectures/115/ I don't know

Re: [Haifux] [Haifux Lecture] User space syscall tracing and manipulation - fakeroot-ng by Shachar Shemesh

2008-01-17 Thread arbel yossi
Hi, Thanks for the clarification; this makes things even more interesting and exiting ! Yossi -Original Message- From: [EMAIL PROTECTED] on behalf of Shachar Shemesh Sent: Thu 1/17/2008 12:45 PM To: arbel yossi Cc: Haifa linux club; linux-il Subject: Re: [Haifux] [Haifux Lecture] User

Re: [Haifux] [Haifux Lecture] User space syscall tracing andmanipulation - fakeroot-ng by Shachar Shemesh

2008-01-17 Thread Shachar Shemesh
Muli Ben-Yehuda wrote: 2. Syscall generation - program calls one syscall, you make it call three. Interesting... I assume this is without kernel support (e.g., UML's SKAs patches). I wouldn't be able to call it user space if it was. I should point out that, ptrace being

Re: [Haifux] [Haifux Lecture] User space syscall tracing andmanipulation - fakeroot-ng by Shachar Shemesh

2008-01-17 Thread Muli Ben-Yehuda
On Thu, Jan 17, 2008 at 02:12:31PM +0200, Shachar Shemesh wrote: 1. Automatic manipulation. Unlike strace, fakeroot-ng actually changes the program while running. Unlike gdb, it does so automatically. When I did this in the past, it was always intimately tied to what the victim was