Are you aware that this can be done without elevated privileges using seccomp(2)[0] and ptrace(2)[1] using SECCOMP_RET_TRACE? (or with ptrace alone using PTRACE

Are you aware that this can be done without elevated privileges using seccomp(2)[0] and ptrace(2)[1] using SECCOMP_RET_TRACE? (or with ptrace alone using PTRACE_SYSEMU) Although the ptrace API can be daunting and I believe it's somewhat involved to do anything besides changing values returned by the call, however the upside (or downside) is you don't need to learn any kernel programming. I wish these APIs were more accessible as I feel there's a lot of potential to use them in creative ways. EDIT: Just noticed your mention at the bottom of the post, feel free to disregard this [0]http://man7.org/linux/man-pages/man2/ptrace.2.html http://man7.org/linux/man-pages/man2/ptrace.2.html [1]http://man7.org/linux/man-pages/man2/seccomp.2.html http://man7.org/linux/man-pages/man2/seccomp.2.html