Renaming Inode Should Have Its Distinct Relationship Subtype

CamFlow / camflow-dev

Generates kernel patch for CamFlow Linux Provenance Capture.

http://camflow.org/

GNU General Public License v2.0

26 stars 16 forks source link

Renaming Inode Should Have Its Distinct Relationship Subtype #90

Closed michael-hahn closed 5 years ago

michael-hahn commented 5 years ago

Currently, provenance_inode_rename hook results in similar substructure as provenance_inode_link hook, both of which use link relationship subtype between tasks and inodes. This is not ideal as one cannot distinguish these two different actions from provenance graph.

tfjmp commented 5 years ago

https://github.com/CamFlow/camflow-dev/commit/cd0078a0158af97e5dd605d13ee13137552affa3 should have fixed the issue.

@michael-hahn please double check that it is ok and close the issue!

michael-hahn commented 5 years ago

TinkerBell shows that provenance_inode_rename now has rename relationship subtype while provenance_inode_link has link relationship subtype. Close this issue.