brintos-1995 hollow probe
path=usr/sbin/pam_timestamp_check