snoopy for Debian
-----------------

If you want to enable execve logging to all programs, snoopy should be added to
/etc/ld.so.preload.  If you want to selectively apply this logging only to
specific applications instead, launch those with LD_PRELOAD=libsnoopy.so set in
the enivornment.

If you want to change that setting, run
   dpkg-reconfigure snoopy
instead of manually adding/removing the shared library to /etc/ld.so.preload
(otherwise your change will be reverted when the snoopy package is upgraded).

Be aware that snoopy's logging can be bypassed, for example by executing
programs which are statically linked (and thus do not use the runtime dynamic
linker at all).

 -- Lukas Schwaighofer <lukas@schwaighofer.name>, Wed, 05 Jul 2017 21:24:15 +0200