On Tue, 2008-08-12 at 19:47 -0400, Steve Grubb wrote: > On Wednesday 06 August 2008 10:36:46 Mimi Zohar wrote: > > We are interested in using auditing's context pathname information. > > Is this the best way of accessing it? > > > > Add support for accessing auditing's inode full pathname. > > What would this be used for? Al could you comment on this? Would there be > locking issues?
The IMA measurement hash list contains a file name hint. Using a full pathname, when available, would be nice. Mimi -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit