[RFC][PATCH] audit: get inode pathname patch
Mimi Zohar
zohar at linux.vnet.ibm.com
Wed Aug 13 22:28:32 UTC 2008
On Tue, 2008-08-12 at 19:47 -0400, Steve Grubb wrote:
> On Wednesday 06 August 2008 10:36:46 Mimi Zohar wrote:
> > We are interested in using auditing's context pathname information.
> > Is this the best way of accessing it?
> >
> > Add support for accessing auditing's inode full pathname.
>
> What would this be used for? Al could you comment on this? Would there be
> locking issues?
The IMA measurement hash list contains a file name hint. Using
a full pathname, when available, would be nice.
Mimi
More information about the Linux-audit
mailing list