3 ms·
Comparing two snapshots would convert multiple modifications into one big change.
by dfc 11y ago
Comparing two snapshots would convert multiple modifications into one big change.
- the8472 11y agocombining the ptrace approach for logging with mount namespaces, snapshotting or overlayfs would probably be more consistent approach if the program actually tries to use the files. just stubbing out the system calls sounds like it'll quickly break down once the programs try to do something more complicated with the files.