https://bugs.kde.org/show_bug.cgi?id=400386
--- Comment #19 from Harald Sitter <[email protected]> --- I'm sure there is but I wouldn't know how exactly to set that up. auditd technically should allow you to watch which process is writing to the path. The tool inotifywatch might as well. Both would only help if it is still actively being copied there, if some script once ran 5 months ago and copied it to /lib there may be no way to tell anymore. Conceivably you could rename the files and restart to see if they are re-appear, if not they likely had been put there in the past. https://linuxhint.com/auditd_linux_tutorial/ -- You are receiving this mail because: You are watching all bug changes.
