Tycho Kirchner

> Do you know if there exist any resources that cover all such tracking methods? Maybe a review paper? Please excuse the self promotion, but you may be interested in...

Haven't checked further but one idea could be to send a signal from the PS0-subshell. test.sh: ~~~ counter=0 trap_handler(){ counter=$((counter+1)) echo "hi from trap_handler: $counter: $(history 1)" >&2 } trap...

Yes, but my time is quite limited these days. It will take a week or two ..

Hi. This should be possible, but would you mind telling me what exactly your platform is? (; execinfo.h seems to be part of (g)libc on Linux, so I guess it...

Wow. Haven't considered porting shournal to Android yet. Just checked: at least fanotify seems to be available in bionic: ./libc/kernel/uapi/linux/fanotify.h. I suspect this is only the tip of the iceberg...

stdio_filebuf.h and referencing functions parseGenericKeyValFile, parseRealUidOf can be removed, they are not used.

Those are simple. Use the locked ones instead (without _unlocked-suffix) (`#ifndef __ANDROID__`). I'm setting up an Android VM, so later I'll be able to test myself as well.

Before digging further into this, could you please check the following points: * is your kernel compiled with fanotify support? * initializing fanotify requires CAP_SYS_ADMIN, which is normally implemented using...

> Another tool named fsmon with fanotify and inotify backends is properly working on termux. Did you check? Reading [this](https://github.com/nowsecure/fsmon) ~~~ * inotify (linux / android) * fanotify (linux >...

@tathastu871 I just check in my Android x86 virtual machine: ~~~ $ zgrep -i fanotify /proc/config.gz # CONFIG_FANOTIFY is not set ~~~ Does your kernel include fanotify support? Otherwise I...