michaelhood · October 15, 2012 12:21
diff --git a/gistfile1.txt b/gistfile1.txt
 mh@mbp:~% sudo dtruss -f sudo -u\#$UID whoami 2>/dev/null
 mh

 mh@mbp:~% sudo dtruss -f -t fakesyscall sudo -u\#$UID touch /  
 	PID/THRD  SYSCALL(args) 		 = return
 28082/0xad253:  fork()		 = 0 0
 touch: setting times of ‘/’: Permission denied

 mh@mbp:~% # note that i only used these methods to hide output
 mh@mbp:~% # to keep the demo short. dtruss is functional.
	mh@mbp:~% sudo dtruss -f sudo -u\#$UID whoami 2>/dev/null
	mh

	mh@mbp:~% sudo dtruss -f -t fakesyscall sudo -u\#$UID touch /
	PID/THRD SYSCALL(args) = return
	28082/0xad253: fork() = 0 0
	touch: setting times of ‘/’: Permission denied

	mh@mbp:~% # note that i only used these methods to hide output
	mh@mbp:~% # to keep the demo short. dtruss is functional.