Horje
ubuntu auditd rule for PID process Code Example
ubuntu auditd rule for PID process 
# To see all syscalls made by a specific program:
sudo auditctl -a always,exit -S all -F pid=1005

#To watch a file for changes (2 ways to express):

sudo auditctl -w /etc/shadow -p wa
sudo auditctl -a always,exit -F path=/etc/shadow -F perm=wa
Source: manpages.ubuntu.com



Shell

Related
how to uninstall bitninja Code Example how to uninstall bitninja Code Example
uninstall debian kodi Code Example uninstall debian kodi Code Example
docker format Code Example docker format Code Example
How to clone a repo Code Example How to clone a repo Code Example
shell thousand comma in number Code Example shell thousand comma in number Code Example

Type:
 Code Example
Category:
 Coding
Sub Category:
 Code Example
Uploaded by:
 Admin
Views:
 11



 

Horje