-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sun, Oct 11, 2015 at 02:34:04PM +0300, Reco wrote:
[...] > Setting immutable bit is a crude, definitely :-) > but effective technique indeed. But > there's less destructive approach called auditd. Thanks for this hint. May turn useful some day. To be honest, I expected some massive thing playing LD_PRELOAD games, but it seems that most of the work is done in the kernel's audit framework. Regards - -- tomás -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlYaSP8ACgkQBcgs9XrR2kbXUQCfZQM+NoHcCoBR17ctrZoGg00q NnEAni+KOfjIhtbo8lDSNF2BD2KmU4w2 =HLvV -----END PGP SIGNATURE-----
