On Fri, 2020-07-17 at 09:56 -0400, Cristian Rodríguez wrote:
Of course this came to mind.. but I was looking at a system-wide thing that could possibly run at very early boot and maybe raise Cthulhu if something lame like fopen("/tmp/fixednamewithoutdotrandompart". "wb") is used by an application .
There's the LD_PRELOAD-based PathAuditor [1]. It would be interesting
to see if it can boot up a full openSUSE system, and what it finds.
1: https://github.com/google/path-auditor
--
Malte Kraus