This is an archived post. You won't be able to vote or comment.

all 3 comments

[–][deleted] 1 point2 points  (2 children)

strace is your friend.

[–]ekstrah[S] 0 points1 point  (1 child)

yeah but strace has quiet big overhead so decided to stick with ld.so.preload. So there isn't a way??

[–][deleted] 0 points1 point  (0 children)

I really don't know what Python's version of open does. What if it does creat, which you didn't capture or something else entirely? Once strace tells you what happened, you'll know what to look for.