> AFAIK there's no way to have the kernel notify you of when a different process starts listening on a port. You can use mandatory access control for this. Ap

> AFAIK there's no way to have the kernel notify you of when a different process starts listening on a port. You can use mandatory access control for this. AppArmour or SELinux are examples. Unfortunately they are hard, not sexy and sysadmins (people who tend to do not sexy hard things) are a dead/dying breed