autrace - a program similar to strace

       Steve Grubb

Red Hat                                             Jan 2007                                          AUTRACE(8)

autrace  is  a  program  that will add the audit rules to trace a process similar to strace. It will then
       execute the program passing arguments to it. The resulting audit information will be in the audit logs if
       the audit daemon is running or syslog. This command deletes all audit rules prior to executing the target
       program and after executing it. As a safety precaution, it will not run unless all rules are deleted with
       auditctl prior to use.

       The following illustrates a typical session:

       autrace/bin/ls/tmpausearch--startrecent-p2442-i

       and for resource usage mode:

       autrace-r/bin/lsausearch--startrecent-p2450--raw|aureport--file--summaryausearch--startrecent-p2450--raw|aureport--host--summary

       autrace - a program similar to strace

-r     Limit syscalls collected to ones needed for analyzing resource usage. This could help people doing
              threat modeling. This saves space in logs.

ausearch(8), auditctl(8).

autraceprogram [-r] [program-args]...