Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

3
  • 1
    You may want to log openat and execve as well (at least). Now it also depends what is meant by used and file, as it may be that you also need to log creat, truncate, access, stat, mkdir, connect... Commented Nov 6, 2013 at 22:58
  • Could you please provide some additional explanations to the methods you have mentioned? Where this line of code should be placed? Should I unzip the /boot/initramfs-xxxxx.img reconfigure it and put it back to /boot as archieve? Commented Nov 25, 2013 at 11:07
  • 1
    @VitalyIsaev I don't know Redhat's initramfs structure. If it's anything like Debian, you would add a script somewhere under /usr/share/initramfs-tools (the path may be different on RH), then rebuild the initramfs (on Debian it's update-initramfs) and reboot. Commented Nov 25, 2013 at 12:12