submitted 4 days ago by lemmyuser@programming.dev to c/linux@programming.dev

14 comments fedilink hide all child comments

I wrote a dead simple file canary tool that will install an eBPF program that drops all outgoing packets if a canary is touched. I wrote this in response to the current trend of supply chain attacks that try to harvest credentials

you are viewing a single comment's thread
view the rest of the comments

[-] BetterDev@programming.dev 3 points 4 days ago

Uh yeah, that's the whole idea. I can always just bring it offline and mount the root as a separate disk to a different VM to investigate.

[-] BetterDev@programming.dev 1 points 4 days ago

Or even just log in via serial console, but that's not a capability I have coded in yet.

[-] BetterDev@programming.dev 2 points 4 days ago

I guess what I'm saying is I match the "really know what you're doing" criteria.

this post was submitted on 25 Jun 2026

56 points (98.3% liked)

Linux

14131 readers

548 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev