summaryrefslogtreecommitdiffstats
path: root/system/hexec/README
diff options
context:
space:
mode:
Diffstat (limited to 'system/hexec/README')
-rw-r--r--system/hexec/README12
1 files changed, 12 insertions, 0 deletions
diff --git a/system/hexec/README b/system/hexec/README
new file mode 100644
index 0000000000..c073d38384
--- /dev/null
+++ b/system/hexec/README
@@ -0,0 +1,12 @@
+hexec (hook into exec calls)
+
+hexec can be used to hook into exec system calls. It evaluates a user
+defined expression against all hooked exec calls. This expression can
+contain simple path checks (e.g. -path "*/name") and even complex bash
+scripts.
+
+As an example: hexec -name ls -exec echo {} \; bash
+
+This will run a shell, but any time you try to run "ls", you'll run
+"echo" instead. The syntax is similar to "find"; see the man page for
+details.