there are hooks to some things like auditd though