search

CamFlow / camflow-dev

Generates kernel patch for CamFlow Linux Provenance Capture.
http://camflow.org/
GNU General Public License v2.0
26 stars 15 forks source link

CamFlow's Bookkeeping for Socket Security Field Should Not Be Reflected in Provenance Graph #93

Closed michael-hahn closed 5 years ago

michael-hahn commented 5 years ago

provenance_sk_alloc_security hook is for setting up CamFlow's security bookkeeping, which should not result in any provenance subgraph.

tfjmp commented 5 years ago

https://github.com/CamFlow/camflow-dev/commit/071e407a9556ac0180374a7e047c0d1fa342926e this should fix the issue.

@michael-hahn please double check and close if it works!

michael-hahn commented 5 years ago

TinkerBell confirms that provenance_sk_alloc_security is empty. Close this issue for now.