Top > Security > procwatch
procwatch - Watches a /proc filesystem for new messages
Procwatch watches a /proc filesystem for new
processes. When a process is created, procwatch reports the time, the
username, the PID, and the binary that was run. Its output is suitable
for logging to log files and is geared for system administrators who
are testing a new but as yet untrusted UNIX system. Although it cannot
detect, and is not proof against, hacked loadable kernel modules that
have modified /proc, it is useful in watching for possible rogue
binaries.
Obtaining
| | Version 1.2 (stable) released on 2001-11-23 | | | Licensed under Perl. | | This is not a GNU package. |
|
Support contacts
Project contacts
Related information
| Interfaces | command line |
| Source languages | Perl |
| Supported languages | Perl |
Entry information
Categories
The copyright licensing notice below applies to this text. The software
described in this text has its own copyright notice and license, which can
usually be found in the distribution itself.
Copyright © 2000, 2001, 2002, 2003 Free Software Foundation, Inc.
Permission is granted to copy, distribute, and/or modify this document
under the terms of the GNU Free Documentation License, Version 1.1 or any
later version published by the Free Software Foundation; with no Invariant
Sections, with no Front-Cover Texts, and with no Back-Cover Texts. A copy
of this license is included in the file COPYING.DOC.
Please report any problems in this page to bug-directory@gnu.org, or find out how you can help fix them.
The FSF provides this directory as a service to the free software community. Please consider donating to the FSF to help support this project.