Email alert when private keys read from disk (honeypot, auditd)
I’d like to receive an immediate alert every time something reads the contents of my private key on Debian Linux. How can I do that? I have an RSA private key stored on my server’s disk at the following location: /etc/ssl/private/super-secret.key It’s only readable by root, but I still want to have a log of … Read more