отслеживать системные вызовы и сигналы (trace system calls and signals)
SETUID INSTALLATION
If strace is installed setuid to root then the invoking user will
be able to attach to and trace processes owned by any user. In
addition setuid and setgid programs will be executed and traced
with the correct effective privileges. Since only users trusted
with full root privileges should be allowed to do these things,
it only makes sense to install strace as setuid to root when the
users who can execute it are restricted to those users who have
this trust. For example, it makes sense to install a special
version of strace with mode 'rwsr-xr--', user root and group
trace, where members of the trace group are trusted users. If
you do use this feature, please remember to install a regular
non-setuid version of strace for ordinary users to use.
