ltrace

File Read

Context: sudo, suid, unprivileged

ltrace -F /path/to/input-file /dev/null

File Write

Context: sudo, unprivileged

ltrace -s 999 -o /path/to/input-file ltrace -F DATA

Shell

Context: sudo, unprivileged

ltrace -b -L /bin/sh