Tag: auditd

How to prevent NetworkManager and other programs from modifying the /etc/resolv.conf file

Posted by Alex On May 16, 2021

The /etc/resolv.conf file contains a list of DNS servers that are used to resolve hostnames to IP addresses. NetworkManager, which is responsible for making network connections, automatically changes the contents of this file. The replacement takes place without notifying the user and can lead to unpleasant consequences – for example, causing a DNS leak, which negatively affects anonymity. It can...

How to find out which process is modifying a file

Posted by Alex On May 16, 2021

Linux has an auditing platform that lets you know when files or/and folders is being accessed, modified, or executed. You can also monitor changes in entire directories. How to install auditd (auditctl) On Debian, Linux Mint, Kali Linux, Ubuntu and their derivatives, to install, run the command: sudo apt install auditd In Arch Linux, Manjaro, BlackArch and their derivatives, this...
Loading...
X