#!/bin/bash

# Copyright 2019 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

set -x

# Use this script to generate an initial list of syscalls to whitelist with
# seccomp. Note that it will generate two files, each of which ends with the
# PID of the process that ran; you only need to analyze the file with the
# higher PID since the first is the runuser process.

OUTPUT_DIR="$(date --iso-8601=seconds)"
mkdir "${OUTPUT_DIR}"

stop biod || true
strace -ff -o "${OUTPUT_DIR}/strace.log" runuser -u biod -g biod \
    -- /usr/bin/biod --log_dir=/var/log/biod >/var/log/biod.out