On Fri, Jan 11, 2019 at 08:28:18PM +0100, basti wrote: > Hello, > > is there a way to monitor processes that access /dev/urandom
auditctl -w /dev/urandom -r remove it with auditctl -D > and show how may entropy the get? You'll probably need some advanced kernel-level tracing facility (such as BPF) for that. Reco
