suidsnoop. suidsnoop is a tool based on eBPF LSM programs that logs whenever a suid binary is executed and implements custom allow/deny lists.

github.com/willfindlay/suidsnoop

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.