Another question about the ima-buf template. I discovered a log where
the filename is blacklisted-hash. It appears to be followed by 32-bytes
that could be a hash.
Normally, hashes have an ASCII algorithm, a : and nul terminated string.
The one in my log omits the algorithm. There are just 32 bytes.
1 - Is this a malformed log?
2 - Is the algorithm picked up from the d-ng field?
3 - If (2), what happens if there is a custom template like 'n-ng|buf'
and there is no d-ng to pick up the hash algorithm from?
