4 ms·
What kind of monitoring would you deploy that would raise an alert for a process opening and reading readable files?
by thrownaway2424 13y ago
What kind of monitoring would you deploy that would raise an alert for a process opening and reading readable files?
- anonymouz 13y agoSELinux. This kind of stuff would be where it really shines. A correctly configured installation would block and report access to files the application is not supposed to access. Maintaining it, especially for individual applications, is work, but it seems to me that on the scale of Google it may well be worthwhile.