Comment on Copy Fail: 732 Bytes to Root on Every Major Linux DistributionComments−immanuwell4mothe real kicker is the page cache trick making it invisible to disk-based integrity checks, which means your auditd and tripwire setups are worth exactly nothing here
Comments
the real kicker is the page cache trick making it invisible to disk-based integrity checks, which means your auditd and tripwire setups are worth exactly nothing here