[Linux-ima-user] Measurement list and path of measured files

[Jordi C. J. <jor...@sc...>]

Dear all,

Recently I have started looking at IMA to explore the possibilities that 
it offers. I have a question regarding the measurement list and the 
files measured.

The point is that it does not seem possible to uniquely identify a file 
with the information in the field "file-hint". The absolute path of the 
file is not always available, hence in many cases several entries with 
the same file name will appear. This makes impossible to distinguish if 
two entries with the same file-hint value correspond to two different 
files in the file system or to a file that has been modified.

Is it possible to include the file name with the complete absolute path 
in the measurement list? If not, is there a reason for it? (maybe memory 
used by the list?)

Thanks and best regards,
Jordi.

-- 
Jordi Cucurull Juan
Researcher
Scytl Secure Electronic Voting
Plaça Gal·la Placidia, 1-3, 1st floor · 08006 Barcelona
jor...@sc...
http://www.scytl.com