Intercept messages between McAfee webserver and root service

mcafee_intercept.sh

#!/bin/bash 
_restore() {
    mv /var/opt/NAI/LinuxShield/dev/nails_monitor{_real,}
}
 
echo "Restarting nails"
/etc/init.d/nails restart 2>&1 > /dev/null
 
mv /var/opt/NAI/LinuxShield/dev/nails_monitor{,_real}
 
echo "Intercepted data:"
 
socat -v \
unix-listen:/var/opt/NAI/LinuxShield/dev/nails_monitor,perm=777,fork \
unix-connect:/var/opt/NAI/LinuxShield/dev/nails_monitor_real
 
trap _restore SIGTERM