3 ms·
Sure, but how do you know what programs are misusing it?
by mirimir 8y ago
Sure, but how do you know what programs are misusing it?
- btown 8y agoThis speaks to a more general need for user-friendly audit logs of which resources are accessed by which programs. I should be able to tell on any platform if Spotify called fopen on something in my documents folder.
- nickysielicki 8y agoI think this is largely possible with eBPF, if you cared enough.
- auslander 8y agoSELinux or app-armor, keep it in enforcing mode.
- jlgaddis 8y agoauditd(8)
- mirimir 8y agoThanks. https://security.blogoverflow.com/2013/01/a-brief-introduction-to-auditd/ https://security.blogoverflow.com/2013/01/a-brief-introducti...
- yellowapple 8y agoRename it and see which programs complain :)