WIwillyjl·Feb 18, 2025
I am by no means a kernel pro, but my gut tells me this is either not possible or not feasible.
How it works currently is entirely based on the /proc FS, and even though processes launched by say user1 have /proc/123 and /proc/123/mem both owned by user1, and /proc/123/mem has rw permissions for owner, it returns a permission error when attempting to open the file. And rightfully so, wouldn't want any random program being able to spy and modify other programs' memory on the same permission level.
What you mention sounds like executing the code of the target program inside the same address space of the tool, which to me sounds like a nightmare (if it is even possible). I've had trouble with my own code (in other projects) getting OpenGL to work well between QtWebengine and GLFW, never managed to solve it, mixing contexts of different libra
Read the rest
ries in the same address space is already complex when you are writing the code yourself, let alone when you're mixing with arbitrary binaries made by others.
The only thing I could see working is the debugger approach, which I have no experience with (in implementation terms) and would start being out of scope of this project I think. I haven't looked at it much, but PINCE might be more akin to what you mentioned. https://github.com/korcankaraokcu/PINCE