想知道开机后到底访问了哪些文件
AI出来的答案基本都是auditd、inotifywait、fatrace 等,不好用
还是直接从 atime入手最方便
- 查看当前挂载参数
mount | grep -E "^/dev/"
/dev/sda2 on / type ext4 (rw,relatime,seclabel)
- 加 strictatime
vi /etc/fstab
from
UUID=XXXXX-UUID / ext4 defaults 1 1
to
UUID=XXXXX-UUID / ext4 defaults,strictatime 1 1
- find 过滤
start_time=$(date -d "$(uptime -s)" +%s)
sudo find / \
-path /run -prune -o \
-path /sys -prune -o \
-path /proc -prune -o \
-path /dev -prune -o \
-path /tmp -prune -o \
-type f \
-exec stat -c "%X %n" {} \; |
awk -v start="$start_time" '$1 > start {print $2}'
- alma 10
/var/lib/rsyslog/imjournal.state
/var/lib/systemd/random-seed
/var/lib/chrony/drift
/var/lib/NetworkManager/NetworkManager.state
/var/lib/NetworkManager/timestamps
/var/lib/NetworkManager/NetworkManager-intern.conf
/var/lib/NetworkManager/internal-84b4e78c-747b-3fee-932d-a3dcd1b4c9d6-ens32.lease
/var/lib/NetworkManager/seen-bssids
/var/log/lastlog
/var/log/btmp
/etc/rsyslog.conf
/etc/locale.conf
/etc/group
/etc/pki/tls/openssl.cnf
/etc/ld.so.cache
/etc/udev/hwdb.bin
/etc/machine-id
/etc/firewalld/firewalld.conf
/etc/firewalld/zones/public.xml
/etc/audit/rules.d/audit.rules
/etc/audit/audit.rules
/etc/audit/auditd.conf
/etc/profile
/etc/modprobe.d/l2tp_ip6-blacklist.conf
/etc/modprobe.d/tipc_diag-blacklist.conf
/etc/modprobe.d/l2tp_ip-blacklist.conf
/etc/modprobe.d/l2tp_eth-blacklist.conf
/etc/modprobe.d/sctp-blacklist.conf
/etc/modprobe.d/sctp_diag-blacklist.conf
/etc/modprobe.d/l2tp_netlink-blacklist.conf
/etc/modprobe.d/firewalld-sysctls.conf
/etc/modprobe.d/l2tp_ppp-blacklist.conf
/etc/environment
/etc/security/pam_env.conf
/etc/security/sepermit.conf
/etc/security/limits.conf
/etc/security/namespace.conf
/etc/resolv.conf
/etc/sysctl.conf
/etc/hostname
/etc/protocols
/etc/passwd
/etc/selinux/config
/etc/selinux/targeted/contexts/openssh_contexts
/etc/selinux/targeted/contexts/default_contexts
/etc/selinux/targeted/contexts/files/file_contexts.subs
/etc/selinux/targeted/contexts/files/file_contexts.local
/etc/selinux/targeted/contexts/files/file_contexts.homedirs.bin
/etc/selinux/targeted/contexts/files/file_contexts.subs_dist
/etc/selinux/targeted/contexts/files/file_contexts.bin
/etc/selinux/targeted/contexts/users/unconfined_u
/etc/selinux/targeted/seusers
/etc/crontab
/etc/inputrc
/etc/debuginfod/elfutils.certpath
/etc/shadow
/etc/host.conf
/etc/cron.d/0hourly
/etc/sysconfig/firewalld
/etc/sysconfig/rsyslog
/etc/sysconfig/irqbalance
/etc/sysconfig/network
/etc/sysconfig/chronyd
/etc/sysconfig/sshd
/etc/sysconfig/crond
/etc/profile.d/colorxzgrep.sh
/etc/profile.d/gawk.sh
/etc/profile.d/colorzgrep.sh
/etc/profile.d/lang.sh
/etc/profile.d/colorls.sh
/etc/profile.d/debuginfod.sh
/etc/profile.d/which2.sh
/etc/profile.d/sh.local
/etc/profile.d/colorgrep.sh
/etc/profile.d/less.sh
/etc/sudoers
/etc/pam.d/other
/etc/pam.d/sudo
/etc/pam.d/sshd
/etc/DIR_COLORS
/etc/sudo.conf
/etc/issue
/etc/vconsole.conf
/etc/NetworkManager/system-connections/ens32.nmconnection
/etc/NetworkManager/NetworkManager.conf
/etc/login.defs
/etc/ssh/sshd_config.d/50-redhat.conf
/etc/ssh/sshd_config.d/40-redhat-crypto-policies.conf
/etc/ssh/sshd_config.d/01-permitrootlogin.conf
/etc/ssh/ssh_host_ed25519_key
/etc/ssh/sshd_config
/etc/ssh/ssh_host_ecdsa_key
/etc/ssh/ssh_host_rsa_key
/etc/ssh/ssh_host_ecdsa_key.pub
/etc/ssh/ssh_host_ed25519_key.pub
/etc/ssh/ssh_host_rsa_key.pub
/etc/GREP_COLORS
/etc/authselect/postlogin
/etc/authselect/password-auth
/etc/authselect/nsswitch.conf
/etc/authselect/system-auth
/etc/bashrc
/usr/share/crypto-policies/back-ends/DEFAULT/opensslcnf.config
/usr/share/crypto-policies/back-ends/DEFAULT/gnutls.config
/usr/share/crypto-policies/back-ends/DEFAULT/opensshserver.config
/usr/share/crypto-policies/DEFAULT/gnutls.txt
/usr/share/crypto-policies/DEFAULT/opensshserver.txt
/usr/share/crypto-policies/DEFAULT/opensslcnf.txt
/usr/share/terminfo/x/xterm
/usr/share/zoneinfo/PRC
/usr/share/zoneinfo/Asia/Chungking
/usr/share/zoneinfo/Asia/Shanghai
/usr/share/zoneinfo/Asia/Chongqing
/usr/share/zoneinfo/Asia/Harbin
/usr/share/locale/locale.alias
/usr/sbin/rsyslogd
/usr/sbin/auditctl
/usr/sbin/auditd
/usr/sbin/ethtool
/usr/sbin/swapon
/usr/sbin/unix_chkpwd
/usr/sbin/augenrules
/usr/sbin/agetty
/usr/sbin/sshd
/usr/sbin/sysctl
/usr/sbin/crond
/usr/lib/udev/udev.conf
/usr/lib/udev/fc_wwpn_id
/usr/lib/udev/ata_id
/usr/lib/udev/rules.d/75-probe_mtd.rules
/usr/lib/udev/rules.d/60-cdrom_id.rules
/usr/lib/udev/rules.d/70-mouse.rules
/usr/lib/udev/rules.d/70-camera.rules
/usr/lib/udev/rules.d/84-nm-drivers.rules
/usr/lib/udev/rules.d/10-dm.rules
/usr/lib/udev/rules.d/70-memory.rules
/usr/lib/udev/rules.d/60-tpm-udev.rules
/usr/lib/udev/rules.d/60-fido-id.rules
/usr/lib/udev/rules.d/61-scsi-sg3_id.rules
/usr/lib/udev/rules.d/98-kexec.rules
/usr/lib/udev/rules.d/81-net-dhcp.rules
/usr/lib/udev/rules.d/78-sound-card.rules
/usr/lib/udev/rules.d/40-redhat-hotplug.rules
/usr/lib/udev/rules.d/60-persistent-storage.rules
/usr/lib/udev/rules.d/50-udev-default.rules
/usr/lib/udev/rules.d/40-redhat-s390.rules
/usr/lib/udev/rules.d/40-redhat.rules
/usr/lib/udev/rules.d/40-elevator.rules
/usr/lib/udev/rules.d/70-uaccess.rules
/usr/lib/udev/rules.d/60-sensor.rules
/usr/lib/udev/rules.d/60-drm.rules
/usr/lib/udev/rules.d/90-vconsole.rules
/usr/lib/udev/rules.d/13-dm-disk.rules
/usr/lib/udev/rules.d/60-evdev.rules
/usr/lib/udev/rules.d/11-dm-parts.rules
/usr/lib/udev/rules.d/64-ext4.rules
/usr/lib/udev/rules.d/90-iocost.rules
/usr/lib/udev/rules.d/68-del-part-nodes.rules
/usr/lib/udev/rules.d/70-joystick.rules
/usr/lib/udev/rules.d/90-nm-thunderbolt.rules
/usr/lib/udev/rules.d/85-nm-unmanaged.rules
/usr/lib/udev/rules.d/73-seat-late.rules
/usr/lib/udev/rules.d/71-prefixdevname.rules
/usr/lib/udev/rules.d/64-btrfs.rules
/usr/lib/udev/rules.d/60-block.rules
/usr/lib/udev/rules.d/66-kpartx.rules
/usr/lib/udev/rules.d/60-serial.rules
/usr/lib/udev/rules.d/71-seat.rules
/usr/lib/udev/rules.d/70-power-switch.rules
/usr/lib/udev/rules.d/60-infiniband.rules
/usr/lib/udev/rules.d/63-fc-wwpn-id.rules
/usr/lib/udev/rules.d/99-systemd.rules
/usr/lib/udev/rules.d/63-scsi-sg3_symlink.rules
/usr/lib/udev/rules.d/60-persistent-storage-mtd.rules
/usr/lib/udev/rules.d/60-persistent-alsa.rules
/usr/lib/udev/rules.d/65-scsi-cciss_id.rules
/usr/lib/udev/rules.d/60-dmi-id.rules
/usr/lib/udev/rules.d/60-input-id.rules
/usr/lib/udev/rules.d/60-net.rules
/usr/lib/udev/rules.d/60-autosuspend.rules
/usr/lib/udev/rules.d/00-scsi-sg3_config.rules
/usr/lib/udev/rules.d/80-drivers.rules
/usr/lib/udev/rules.d/75-net-description.rules
/usr/lib/udev/rules.d/60-persistent-input.rules
/usr/lib/udev/rules.d/40-usb-blacklist.rules
/usr/lib/udev/rules.d/60-persistent-storage-tape.rules
/usr/lib/udev/rules.d/80-net-setup-link.rules
/usr/lib/udev/rules.d/70-touchpad.rules
/usr/lib/udev/rules.d/60-persistent-v4l.rules
/usr/lib/udev/rules.d/95-dm-notify.rules
/usr/lib/udev/dmi_memory_id
/usr/lib/udev/rename_device
/usr/lib/os-release
/usr/lib/modprobe.d/dist-blacklist.conf
/usr/lib/modprobe.d/systemd.conf
/usr/lib/systemd/journald.conf
/usr/lib/systemd/systemd-update-utmp
/usr/lib/systemd/user-generators/systemd-xdg-autostart-generator
/usr/lib/systemd/systemd-random-seed
/usr/lib/systemd/user/background.slice
/usr/lib/systemd/user/app.slice
/usr/lib/systemd/user/paths.target
/usr/lib/systemd/user/basic.target
/usr/lib/systemd/user/sockets.target
/usr/lib/systemd/user/default.target
/usr/lib/systemd/user/session.slice
/usr/lib/systemd/user/systemd-tmpfiles-clean.timer
/usr/lib/systemd/user/shutdown.target
/usr/lib/systemd/user/systemd-tmpfiles-clean.service
/usr/lib/systemd/user/dbus-broker.service
/usr/lib/systemd/user/systemd-tmpfiles-setup.service
/usr/lib/systemd/user/dbus.socket
/usr/lib/systemd/user/grub-boot-success.timer
/usr/lib/systemd/user/timers.target
/usr/lib/systemd/user/grub-boot-success.service
/usr/lib/systemd/system/sshd@.service
/usr/lib/systemd/system/systemd-rfkill.service
/usr/lib/systemd/system/user-runtime-dir@.service
/usr/lib/systemd/system/user@0.service.d/10-login-barrier.conf
/usr/lib/systemd/system/systemd-sysext@.service
/usr/lib/systemd/system/user@.service
/usr/lib/systemd/system/systemd-bootctl@.service
/usr/lib/systemd/system/systemd-rfkill.socket
/usr/lib/systemd/system/blockdev@.target
/usr/lib/systemd/system/user-.slice.d/10-defaults.conf
/usr/lib/systemd/system/NetworkManager-dispatcher.service
/usr/lib/systemd/user-environment-generators/30-systemd-environment-d-generator
/usr/lib/systemd/systemd
/usr/lib/systemd/systemd-user-runtime-dir
/usr/lib/systemd/systemd-vconsole-setup
/usr/lib/systemd/network/98-default-mac-none.link
/usr/lib/systemd/network/99-default.link
/usr/lib/systemd/systemd-user-sessions
/usr/lib/systemd/profile.d/70-systemd-shell-extra.sh
/usr/lib/systemd/systemd-sysctl
/usr/lib/systemd/systemd-executor
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/modules.builtin.alias.bin
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/modules.alias.bin
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/modules.builtin.bin
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/modules.dep.bin
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/modules.softdep
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/modules.symbols.bin
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/arch/x86/events/rapl.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/arch/x86/events/intel/intel-cstate.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/arch/x86/events/intel/intel-uncore.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/ipv6/netfilter/nf_reject_ipv6.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/ipv6/netfilter/nft_fib_ipv6.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/ipv6/netfilter/nf_defrag_ipv6.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/ipv4/netfilter/nft_fib_ipv4.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/ipv4/netfilter/nf_defrag_ipv4.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/ipv4/netfilter/nf_reject_ipv4.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/rfkill/rfkill.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/netfilter/nft_chain_nat.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/netfilter/nf_tables.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/netfilter/nft_ct.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/netfilter/nft_reject_inet.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/netfilter/nft_reject.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/netfilter/nft_fib.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/netfilter/ipset/ip_set.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/netfilter/nf_nat.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/netfilter/nf_conntrack.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/net/netfilter/nft_fib_inet.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/thermal/intel/intel_tcc_cooling.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/platform/x86/intel/pmt/pmt_telemetry.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/platform/x86/intel/pmt/pmt_class.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/platform/x86/intel/intel_vsec.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/platform/x86/intel/uncore-frequency/intel-uncore-frequency.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/platform/x86/intel/uncore-frequency/intel-uncore-frequency-common.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/platform/x86/intel/pmc/intel_pmc_core.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/scsi/sg.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/input/misc/pcspkr.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/input/joydev.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/misc/vmw_balloon.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/powercap/intel_rapl_common.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/powercap/intel_rapl_msr.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/gpu/drm/ttm/ttm.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/gpu/drm/vmwgfx/vmwgfx.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/gpu/drm/drm_ttm_helper.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/i2c/i2c-smbus.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/i2c/busses/i2c-piix4.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/net/fjes/fjes.ko.xz
/usr/lib/modules/6.12.0-55.9.1.el10_0.x86_64/kernel/drivers/net/ethernet/intel/e1000/e1000.ko.xz
/usr/lib/sysctl.d/50-libkcapi-optmem_max.conf
/usr/lib/sysctl.d/50-redhat.conf
/usr/lib/sysctl.d/50-pid-max.conf
/usr/lib/sysctl.d/10-default-yama-scope.conf
/usr/lib/sysctl.d/10-map-count.conf
/usr/lib/sysctl.d/50-coredump.conf
/usr/lib/sysctl.d/50-default.conf
/usr/lib/kbd/keymaps/xkb/cn.map.gz
/usr/lib/kbd/consolefonts/eurlatgr.psfu.gz
/usr/lib/pam.d/systemd-user
/usr/lib/NetworkManager/dispatcher.d/20-chrony-onoffline
/usr/lib/NetworkManager/dispatcher.d/20-chrony-dhcp
/usr/lib/tmpfiles.d/man-db.conf
/usr/lib/tmpfiles.d/var.conf
/usr/lib/tmpfiles.d/systemd-tmp.conf
/usr/lib/tmpfiles.d/journal-nocow.conf
/usr/lib/tmpfiles.d/selinux-policy.conf
/usr/lib/tmpfiles.d/systemd.conf
/usr/lib/tmpfiles.d/libselinux.conf
/usr/lib/tmpfiles.d/rootfiles.conf
/usr/lib/tmpfiles.d/setup.conf
/usr/lib/tmpfiles.d/tpm2-tss-fapi.conf
/usr/lib/tmpfiles.d/credstore.conf
/usr/lib/tmpfiles.d/pam.conf
/usr/lib/tmpfiles.d/x11.conf
/usr/lib/tmpfiles.d/etc.conf
/usr/lib/tmpfiles.d/20-systemd-stub.conf
/usr/lib/tmpfiles.d/static-nodes-permissions.conf
/usr/lib/tmpfiles.d/systemd-pstore.conf
/usr/lib/tmpfiles.d/sudo.conf
/usr/lib/tmpfiles.d/20-systemd-shell-extra.conf
/usr/lib/tmpfiles.d/sssd.conf
/usr/lib/tmpfiles.d/home.conf
/usr/lib/tmpfiles.d/tmp.conf
/usr/lib/tmpfiles.d/systemd-nologin.conf
/usr/lib/tmpfiles.d/dnf.conf
/usr/lib/tmpfiles.d/cryptsetup.conf
/usr/lib/tmpfiles.d/legacy.conf
/usr/lib/tmpfiles.d/provision.conf
/usr/lib/tmpfiles.d/audit.conf
/usr/lib/locale/C.utf8/LC_ADDRESS
/usr/lib/locale/C.utf8/LC_COLLATE
/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES
/usr/lib/locale/C.utf8/LC_PAPER
/usr/lib/locale/C.utf8/LC_MONETARY
/usr/lib/locale/C.utf8/LC_TIME
/usr/lib/locale/C.utf8/LC_CTYPE
/usr/lib/locale/C.utf8/LC_NUMERIC
/usr/lib/locale/C.utf8/LC_NAME
/usr/lib/locale/C.utf8/LC_TELEPHONE
/usr/lib/locale/C.utf8/LC_MEASUREMENT
/usr/lib/locale/C.utf8/LC_IDENTIFICATION
/usr/lib64/libkeyutils.so.1.10
/usr/lib64/libidn2.so.0.4.0
/usr/lib64/libunistring.so.5.0.0
/usr/lib64/libgmp.so.10.4.1
/usr/lib64/libgcc_s-14-20250110.so.1
/usr/lib64/libsasl2.so.3.0.0
/usr/lib64/libauparse.so.0.0.0
/usr/lib64/libgio-2.0.so.0.8000.4
/usr/lib64/libsmartcols.so.1.1.0
/usr/lib64/libkrb5support.so.0.1
/usr/lib64/libkrb5.so.3.3
/usr/lib64/liblber.so.2.0.200
/usr/lib64/libestr.so.0.0.0
/usr/lib64/libattr.so.1.1.2502
/usr/lib64/libresolv.so.2
/usr/lib64/libproc2.so.0.0.2
/usr/lib64/libacl.so.1.1.2302
/usr/lib64/rsyslog/imjournal.so
/usr/lib64/rsyslog/imuxsock.so
/usr/lib64/rsyslog/lmnet.so
/usr/lib64/security/pam_nologin.so
/usr/lib64/security/pam_sepermit.so
/usr/lib64/security/pam_systemd.so
/usr/lib64/security/pam_env.so
/usr/lib64/security/pam_lastlog.so
/usr/lib64/security/pam_motd.so
/usr/lib64/security/pam_namespace.so
/usr/lib64/security/pam_deny.so
/usr/lib64/security/pam_selinux.so
/usr/lib64/security/pam_loginuid.so
/usr/lib64/security/pam_umask.so
/usr/lib64/security/pam_succeed_if.so
/usr/lib64/security/pam_pwquality.so
/usr/lib64/security/pam_limits.so
/usr/lib64/security/pam_keyinit.so
/usr/lib64/security/pam_unix.so
/usr/lib64/security/pam_faildelay.so
/usr/lib64/libsgutils2-1.48.so.2.0.0
/usr/lib64/libcrack.so.2.9.0
/usr/lib64/ld-linux-x86-64.so.2
/usr/lib64/systemd/libsystemd-shared-257-9.el10_0.1.alma.1.so
/usr/lib64/systemd/libsystemd-core-257-9.el10_0.1.alma.1.so
/usr/lib64/libtinfo.so.6.4
/usr/lib64/libpam_misc.so.0.82.1
/usr/lib64/libselinux.so.1
/usr/lib64/libnss_systemd.so.2
/usr/lib64/libblkid.so.1.1.0
/usr/lib64/libpam.so.0.85.1
/usr/lib64/libgnutls.so.30.40.3
/usr/lib64/libz.so.1.3.1.zlib-ng
/usr/lib64/liblzma.so.5.6.2
/usr/lib64/libp11-kit.so.0.4.1
/usr/lib64/libbpf.so.1.5.0
/usr/lib64/libmnl.so.0.2.0
/usr/lib64/libcap.so.2.69
/usr/lib64/libudev.so.1.7.10
/usr/lib64/libffi.so.8.1.2
/usr/lib64/libglib-2.0.so.0.8000.4
/usr/lib64/libeconf.so.0.6.2
/usr/lib64/libgobject-2.0.so.0.8000.4
/usr/lib64/libseccomp.so.2.5.3
/usr/lib64/libreadline.so.8.2
/usr/lib64/libuuid.so.1.3.0
/usr/lib64/libmpfr.so.6.2.1
/usr/lib64/libmount.so.1.1.0
/usr/lib64/libgssapi_krb5.so.2.2
/usr/lib64/libedit.so.0.0.72
/usr/lib64/libcrypt.so.2.0.0
/usr/lib64/libtasn1.so.6.6.4
/usr/lib64/libpwquality.so.1.0.2
/usr/lib64/libcom_err.so.2.1
/usr/lib64/libpcre2-8.so.0.13.0
/usr/lib64/libkmod.so.2.4.1
/usr/lib64/libm.so.6
/usr/lib64/libfastjson.so.4.3.0
/usr/lib64/libgmodule-2.0.so.0.8000.4
/usr/lib64/libevent-2.1.so.7.0.1
/usr/lib64/libaudit.so.1.0.0
/usr/lib64/libcrypto.so.3.2.2
/usr/lib64/libc.so.6
/usr/lib64/libzstd.so.1.5.5
/usr/lib64/gconv/gconv-modules.cache
/usr/lib64/libssl.so.3.2.2
/usr/lib64/libcap-ng.so.0.0.0
/usr/lib64/libsystemd.so.0.40.0
/usr/lib64/libnm.so.0.1.0
/usr/lib64/libelf-0.192.so
/usr/lib64/libk5crypto.so.3.1
/usr/lib64/libldap.so.2.0.200
/usr/bin/cmp
/usr/bin/gawk
/usr/bin/stat
/usr/bin/readlink
/usr/bin/mount
/usr/bin/find
/usr/bin/uptime
/usr/bin/loadkeys
/usr/bin/cat
/usr/bin/grep
/usr/bin/sudo
/usr/bin/dircolors
/usr/bin/gzip
/usr/bin/journalctl
/usr/bin/mkdir
/usr/bin/id
/usr/bin/chronyc
/usr/bin/bash
/usr/bin/date
/usr/bin/true
/usr/bin/kmod
/usr/bin/udevadm
/usr/bin/nm-online
/usr/bin/sg_inq
/usr/bin/systemd-tmpfiles
/usr/bin/systemctl
/usr/bin/basename
/usr/bin/hostnamectl
/usr/bin/sed
/usr/bin/ls
/usr/bin/tr
/usr/bin/locale
/usr/bin/setfont
/usr/bin/rm
/usr/bin/mktemp
/usr/libexec/sudo/libsudo_util.so.0.0.0
/usr/libexec/sudo/sudoers.so
/usr/libexec/nm-dispatcher
/usr/libexec/grepconf.sh
/usr/libexec/openssh/sshd-session
/root/.bash_history
/root/.bashrc
/root/.bash_profile