this post was submitted on 25 Jun 2026
57 points (98.3% liked)

Linux

14266 readers
637 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago
MODERATORS
Ategon@programming.dev
anzo@programming.dev
dwraf_of_ignorance@programming.dev
57
File canary kill switch (gitlab.com)
submitted 2 weeks ago by lemmyuser@programming.dev to c/linux@programming.dev
14 comments fedilink hide all child comments
 

I wrote a dead simple file canary tool that will install an eBPF program that drops all outgoing packets if a canary is touched. I wrote this in response to the current trend of supply chain attacks that try to harvest credentials

you are viewing a single comment's thread
view the rest of the comments
[–] lemmyuser@programming.dev 12 points 2 weeks ago* (last edited 2 weeks ago)

Right it's just for things you don't use but a credential harvester would find interesting.

I've been working a lot on containing the blast radius with some careful LXC usage, but this was a quick way to get some real value without a ton of thought.