Tag
execve
- Sep 10, 2026 From execve to _start: How the Kernel Maps an ELF Executable Program headers rather than section headers drive loading, PT_LOAD segments carry permissions, PT_INTERP names the dynamic linker, and the kernel hands over a stack with argc, argv, and auxv. compilers
- May 9, 2026 User-Mode Emulation and binfmt_misc for Foreign Binaries How a binary for another architecture starts on a host kernel at all, which parts of its execution the emulator rewrites, and the behaviours that stop being faithful once it does. systems programming
- Apr 29, 2026 Process Start Records as the Unit of Execution Evidence Why the parent-child relationship and process start time are the two facts an investigation needs first, what records the kernel actually keeps, and where those records disappear. security