From 0e1d50c8f0faba9cf50a2e5c90f5e8e82e90e4b3 Mon Sep 17 00:00:00 2001 From: Tom Smeding Date: Mon, 17 Aug 2020 23:50:52 +0200 Subject: Initial working version --- README.md | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 README.md (limited to 'README.md') diff --git a/README.md b/README.md new file mode 100644 index 0000000..63073aa --- /dev/null +++ b/README.md @@ -0,0 +1,9 @@ +# exec-intercept + +This is like [bear](https://github.com/rizsotto/Bear), except it's not specialised to C-like compiler invocations. + +This tool intercepts all `execve` calls, logs them to a file, then executes the +`execve` calls normally. The same is done for `execve` calls of processes thus +started. + +The tool currently only works on Linux. -- cgit v1.2.3-70-g09d2