Description
File creation in the home directory can be traced back to packages by using eBPF-based monitoring.
It is useful for users and administrators who want to understand which programs leave configuration, cache, or data files in home folders. eBPF tracing may need elevated permissions and can reveal private path names, so limit captured output and share logs carefully.