From johannes.nicolai at hpi.uni-potsdam.de  Fri Jul  8 10:39:13 2005
From: johannes.nicolai at hpi.uni-potsdam.de (Johannes Nicolai)
Date: Fri Jul  8 10:39:18 2005
Subject: [Systrace] linux systrace implementation and the -p option
Message-ID: <200507081639.14214.johannes.nicolai@hpi.uni-potsdam.de>

If I use the -p option to attach to a running process under linux, systrace 
will not report any system call of the running process and the name of the 
executable will be silently ignored.
In the moment, where the running process will execute a new programm (exec 
system call), systrace will monitor every system call of the new process and 
will store the decisions in a policy file named by the new executable even 
when the -i flag was given at start.
I am not sure whether this behavior is the expected one or if I have found a 
bug.

Regards

Johannes Nicolai