You are not logged in.
I know there exist command "lsof" that gives user ability to check information about files opened by concrete processes. But, is there any solution to check how concrete process observe file system e.g. which files process is able to see, open, write, even if it's not intended for successfull operation?
The reason I am asking about it, is recently I set up MAC apparmor on my laptop, and when creating profile I could see which files are needed for program to work. Yet, I don't know how to see which files may see specific program/process. I want to know this to be able to create more accurate profile and to avoid misbehaved processes to obtain unconfined access to the system e.g. forbid for pdf reader to see or modify any file on the system, except just files which are exclusively needed for the work.
Last edited by assertion9 (2020-07-08 07:29:39)
Offline