grtrace (c) 2001 Brad Spengler

I find this program very useful.  I'll personally be using it to create
standard ACL sets for major linux distributions.  Basically what this
program does is allow you to automatically create ACLs for any binary
or running process on your system, without having to have any knowledge of
how capabilities work or what permissions a program needs to have on a
certain file or how to interpret strace output (which can be a long,
tedious process)  What it does code-wise is hook up a process pipe to 
strace and parse the output.  One of the header files includes functions
and specific arguments that pertain to specific capabilities, so the 
program knows which ones to enable.  It also parses all execve() and 
open() calls to grab needed file permissions and then spits all the 
information out in the form of an ACL suitable for grsecurity ;)  
just type "make" to compile, and then run ./grtrace -b binary arg1 arg2 
..etc or ./grtrace -p pid
Note that for the output ACL to appear, the process has to exit.
Hope this helps you in creating your own ACLs...enjoy!

-Brad
