TIL about systrack, which extracts syscalls from vmlinuz kernel images. https://github.com/mebeim/systrack https://github.com/mebeim/systrack /? tool to dump a

TIL about systrack, which extracts syscalls from vmlinuz kernel images. https://github.com/mebeim/systrack https://github.com/mebeim/systrack /? tool to dump a list of all syscalls in a binary on Linux, like nm objdump, transitively searches dynamically linked https://www.google.com/search?q=tool+to+dump+a+list+of+all+syscalls+in+a+binary+on+Linux%2C+like+nm+objdump%2C+transitively+searches+dynamically+linked https://www.google.com/search?q=tool+to+dump+a+list+of+all+s... : - list-syscalls.rb "A script to statically list syscalls used by a given binary" https://gist.github.com/koute/166f82bfee5e27324077891008fca6eb https://gist.github.com/koute/166f82bfee5e27324077891008fca6... - "B-Side: Binary-Level Static System Call Identification" (2024) x86-64 https://arxiv.org/abs/2410.18053v1 https://arxiv.org/abs/2410.18053v1 - Systemd has SyscallFilter= From https://news.ycombinator.com/item?id=44947469 https://news.ycombinator.com/item?id=44947469 : > desbma/shh generates SyscallFilter and other systemd unit rules from straces similar to how audit2allow generates SELinux policies by grepping for AVC denials in permissive mode desbma/shh: https://github.com/desbma/shh https://github.com/desbma/shh