#include <sys/ptrace.h>

sys/ptrace.h

includes: sys/appleapiopts.h, sys/cdefs.h, sys/types.h

18 macros · 1 enum · 1 function

underlying type unsigned int

ePtAttachDeprecated

#define PT_TRACE_ME 0

child declares it's being traced

#define PT_READ_I 1

read word in child's I space

#define PT_READ_D 2

read word in child's D space

#define PT_READ_U 3

read word in child's user structure

#define PT_WRITE_I 4

write word in child's I space

#define PT_WRITE_D 5

write word in child's D space

#define PT_WRITE_U 6

write word in child's user structure

#define PT_CONTINUE 7

continue the child

#define PT_KILL 8

kill the child process

#define PT_STEP 9

single step the child

#define PT_ATTACH ePtAttachDeprecated

trace some running process

#define PT_DETACH 11

stop tracing a process

#define PT_SIGEXC 12

signals as exceptions for current_proc

#define PT_THUPDATE 13

signal for thread#

#define PT_ATTACHEXC 14

attach to running process with signal exception

#define PT_FORCEQUOTA 30

Enforce quota for root

#define PT_DENY_ATTACH 31

#define PT_FIRSTMACH 32

for machine-specific requests

int ptrace(int _request, pid_t _pid, caddr_t _addr, int _data)

man page · March 25, 2015

ptrace(2) — process tracing and debugging