Re: Untrusted fs and invalid filenames

[Steve Grubb <sgrubb () redhat com>]

On Monday, March 14, 2011 08:56:45 am Dan Rosenberg wrote:
>  As I see it, there are
> four scenarios where this might matter:

What about repudiation?

5. Attacker constructs drive image such that an unexpected access of a file is made and 
recorded by the audit system showing someone else doing it. Consider remote logging 
and the attacker having no way to erase access.

-Steve