[Linux-ima-user] Fwd: Query regarding three entries of 'init' and and two of rc.sysinit measurement list

[Rishi G. <ris...@gm...>]

Hi,
I am using IMA in linux kernel 2.6.18 having red-hat el5.
In my measurement list I am getting three entries in measurement list
(asscii_measurement list).

The three entries are of
* /init
* /init
* /sbin/init

out of which first entry of /init is of initramfs and third entry is of
/sbin/init when compared with hash value. I am not able to figure out how
second /init entry is coming in my measurement list.

and the same case is with rc.sysinit in /etc/rc.sysinit

Please clarify from where second entry of /init and /etc/rc/sysinit is
coming and what it signifies? and where can i find those in source code.


Thanks
Rishi