在此example
中Using the trace multi-tool to watch login requests, by instrumenting the pam library:
# trace 'pam:pam_start "%s: %s", arg1, arg2'
TIME PID COMM FUNC -
17:49:45 5558 sshd pam_start sshd: root
17:49:47 5662 sudo pam_start sudo: root
17:49:49 5727 login pam_start login: bgregg
Many tools have usage messages (-h), and all should have man pages and text files of example output in the bcc project.
由于trace
可以探测用户级和内核级功能活动(如下图所示),但tutorials非常有限!!!
是否有人可以提供黑客用户级程序代码的分步教程,例如post中的问题?
目标:我想探究函数minor_collection_begin