in reply to Re: mocking or trapping system calls
in thread mocking or trapping system calls

open() also needs to be checked. Running into open PIPE,"| /bin/rm -rf / > /dev/null 2>&1" as root would be rather unpleasant.

Alexander

Replies are listed 'Best First'.
Re^3: mocking or trapping system calls
by wu-lee (Beadle) on May 10, 2008 at 22:42 UTC
    Indeed that's true, and ideally this would be trapped/mocked also, but in this case I don't need to.