I Would like to capture the process `entry`, `exit` and maintain a log for the entire system (probably a daemon process).
One approach was to read `/proc` file system periodically and maintain the list, as I do not see the possibility to register `inotify` for `/proc`. Also, for desktop applications, I could get the help of `dbus`, and whenever client registers to desktop, I can capture.
But for non-desktop applications, I don't know how to go ahead apart from reading `/proc` periodically.
Kindly provide suggestions. You're probably going to have to write a kernel module; I don't think you can do this from userspace accurately.
以上就是Any possible solution to capture process entry/exit?的详细内容，更多请关注web前端其它相关文章！