[RFC][PATCH] audit: get inode pathname patch

Mimi Zohar zohar at linux.vnet.ibm.com
Wed Aug 13 22:28:32 UTC 2008


On Tue, 2008-08-12 at 19:47 -0400, Steve Grubb wrote:
> On Wednesday 06 August 2008 10:36:46 Mimi Zohar wrote:
> > We are interested in using auditing's context pathname information.  
> > Is this the best way of accessing it?
> >
> > Add support for accessing auditing's inode full pathname.
> 
> What would this be used for? Al could you comment on this? Would there be 
> locking issues?

The IMA measurement hash list contains a file name hint. Using
a full pathname, when available, would be nice.

Mimi




More information about the Linux-audit mailing list