search

CamFlow / camflow-dev

Generates kernel patch for CamFlow Linux Provenance Capture.
http://camflow.org/
GNU General Public License v2.0
26 stars 15 forks source link

Provenance Inode Extra Attributes Setting Bookkeeping Should Not Be Reflected in Provenance Graph #91

Closed michael-hahn closed 5 years ago

michael-hahn commented 5 years ago

provenance_inode_setxattr should not result in substructure in provenance graph as this hook is an internal bookkeeping action.

tfjmp commented 5 years ago

https://github.com/CamFlow/camflow-dev/commit/b9cb3205dcf05680f155701f891f535f6778f167 should be fixing this issue.

@michael-hahn check if this is the case and close the issue if it works.

michael-hahn commented 5 years ago

TinkerBell shows that provenance_inode_setxattr no longer has any provenance substructure associated to it. Close this issue.