|
It just might not have a handle open when you were scanning processes.
You could preload a wrapper to ioctl() and filter out the ones that go to the framebuffer. It's a bit messy, though, and probably needs fiddling with the rootfs.
Other than that - no idea, sorry. I would still continue to fiddle with strace, and have it follow forks (-f/-ff) too. Restrict it with "strace -e trace=ioctl,open" so you don't have to wade through all the calls. I think the eink fb driver (which is open sourced and included in the kernel sources!) only has ioctl() and /proc based APIs. So it's definitely one of those.
|