summaryrefslogtreecommitdiffstats
path: root/system/hexec/README
blob: c073d38384264e8b3c1ff9f6a595bcf45467e2de (plain)
hexec (hook into exec calls)

hexec can be used to hook into exec system calls. It evaluates a user
defined expression against all hooked exec calls. This expression can
contain simple path checks (e.g. -path "*/name") and even complex bash
scripts.

As an example: hexec -name ls -exec echo {} \; bash

This will run a shell, but any time you try to run "ls", you'll run
"echo" instead. The syntax is similar to "find"; see the man page for
details.