willfindlay/suidsnoop

suidsnoop is a tool based on eBPF LSM programs that logs whenever a suid binary is executed and implements custom allow/deny lists.

语言：Rust · GitHub 星标：17 · Fork：0

话题：aya · ebpf · linux · linux-kernel · lsm · rust · security · suid-binaries

在 GitHub 上查看原仓库