Score:0

Audit who calls binary

cn flag

Need to get parent process and/or user of curl that, I know, starts from time to time on some server.

Audit is used by others, so I can not trivialy configure it. Is there any other tools?

Romeo Ninov avatar
in flag
Why not `audit`? You can just add one more rule. Something like can do the work: `auditctl -a always,exit -F exe=/bin/curl -F arch=b64 -S execve -k curl_exec`
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.