On Fri, 2023-06-09 at 17:28 +0300, Amir Goldstein wrote: > For IMA/LSMs, I'd imagine that like fanotify, they would rather get > the real path where the real policy is stored. Definitely! > If some log files end with relative path instead of full fake path > it's probably not the worst outcome. -- thanks, Mimi