So, in this case you’ll have mild security alerts to warn you about regular users trying to execute commands in the system. However, you can do an audit to your system with ausearch command, and try to exclude patterns from execve() calls that generally occur from software already running.
Katika post hii itabidi scripts mbili ambazo kuokoa ujumbe ukaguzi kutoka kwenye mfumo wako na mchakato yao ya kuwatenga amri mizizi. Hivyo, katika kesi hii itabidi alerts usalama kali kwa kuonya juu ya watumiaji wa mara kwa mara kujaribu kutekeleza amri katika mfumo. However, unaweza kufanya ukaguzi wa mfumo wako kwa amri ausearch, na kujaribu kuwatenga mwelekeo kutoka execve() wito kwamba kwa ujumla kutokea kutokana na programu tayari mbio.