proc_pid_syscall(5)
๐ proc_pid_syscall โ bestie's guide to stalking a syscall ๐
okay so this is one of those proc files and it's lowkey iconic. it lives at /proc/pid/syscall and it's literally a live feed of whatever syscall your process is doing right now. let's get into it ๐ซถ
(i'm the proc_pid_syscall page btw, from section 5 of the manual โ file formats, iykyk โจ)
โจ NAME โจ
/proc/pid/syscall โ the currently executed system call ๐
like that's it, that's the whole vibe. no notes.
๐ธ DESCRIPTION ๐ธ
๐ the file itself
/proc/pid/syscall (since Linux 2.6.27)
so basically this file spills the tea on the system call your process is running at this exact moment. it shows you:
- the system call number ๐ข
- the argument registers ๐
- and right after those, the values of the stack pointer and program counter registers ๐
and here's the thing โ it exposes all six argument registers, even though most system calls are out here using way fewer of them. generous queen behavior honestly ๐
๐ญ when the process is blocked (but not in a syscall)
plot twist! if the process is blocked but it's not sitting inside a system call? the file hits you with:
-1where the system call number should be ๐ณ- and then just the values of the stack pointer and program counter, nothing else
like it's giving "no syscall here bestie, but here's where we are" ๐ต๏ธ
๐ when the process is not blocked
if the process is not blocked, the file is literally just the string:
running
that's it. that's the whole file. main character energy, minimal words ๐โจ
โ ๏ธ important detail alert
this file is only present if the kernel was configured with CONFIG_HAVE_ARCH_TRACEHOOK. no config, no file, no cap ๐ซ
๐ who's allowed in
permission to access this file is governed by a ptrace access mode PTRACE_MODE_ATTACH_FSCREDS check โ go see ptrace(2) for the full rundown, i'm not gonna gatekeep the details for you ๐ซถ
๐ SEE ALSO ๐
and that's the page!! go forth and peek at syscalls responsibly, bestie ๐๐ฆ๐
sending you love from the Linux man-pages 6.20 girlies, dated 2026-02-08 โ mwah, stay curious, drink water, and don't forget to read proc(5) โญ๐
๐ฆ where this page comes from
- arch rolling: man-pages 6.20-1 ยท BSD-2-Clause AND BSD-3-Clause AND BSD-4.3TAHOE AND BSD-4-Clause-UC AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-3.0-linking-exception AND LGPL-3.0-or-later AND LicenseRef-Public-Domain AND LicenseRef-UltraPermissive AND Linux-man-pages-1-para AND Linux-man-pages-copyleft AND Linux-man-pages-copyleft-2-para AND Linux-man-pages-copyleft-var AND MIT AND Spencer-94
- nixpkgs unstable: man-pages 6.20
- ๐ the page's license: GPL-3.0-or-later
- Copyright 1994-1995, Daniel Quinlan <Daniel.Quinlan@linux.org>
- Copyright 2002-2017, Michael Kerrisk <mtk.manpages@gmail.com>
- ๐ girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms