path_attr Token

The path_attr token contains access path information for an object. The access path specifies the sequence of attribute file objects below the path token object. Systems calls such as openat() access attribute files. For more information on attribute file objects, see the fsattr(5) man page.

The path_attr token contains the following fields:

• A token ID that identifies this token as a path_attr token

• A count that represents the number of sections of attribute file paths

• count null-terminated strings

The praudit command displays the path_attr token as follows:

path_attr,1,attr_file_name