3 ms·

on the other hand you could have 'dry-run <command>' that via .so interposition tricks could intercept and list all destructive changes done by an arbitrary <co

on the other hand you could have 'dry-run <command>' that via .so interposition tricks could intercept and list all destructive changes done by an arbitrary <command>, as a form of sandboxing.

account42 3y ago
Not generally because you can't e.g. know if a write to a socket is destructive or just a query for information needed to decide the next steps/output.
- gpderetta 3y ago
  True, I was only thinking of fs access!