[[edit](/w/index.php?title=Provenance&action=edit&section=12 "Edit section: Whole-system provenance implementation for Linux")] * PASS[[70]](#cite_note-70) – closed source – not maintained – kernel v2.6.X * Hi-Fi[[71]](#cite_note-71) – open source[[72]](#cite_note-72) – not maintained – kernel v3.2.x * Flogger[[73]](#cite_note-73) – closed source – not maintained – kernel v2.6.x * S2Logger[[74]](#cite_note-74) – closed source – not maintained – kernel v2.6.x * LPM[[75]](#cite_note-75) – open source[[76]](#cite_note-76) – not maintained – kernel v2.6.x * Progger[[77]](#cite_note-77)[[65]](#cite_note-:0-65)[[78]](#cite_note-78)[[79]](#cite_note-79) – open source[[80]](#cite_note-80) – not maintained – kernel v2.6.x and kernel v.4.14.x * CamFlow[[81]](#cite_note-81)[[82]](#cite_note-82)[[83]](#cite_note-83) – open source[[84]](#cite_note-84) – maintained – kernel v6.0.X

{
  "evidence_unit_id": "unit:49b82edf77de8e07e792:8850e9ab481f12816022:1:cc21973c12117ddb88eb",
  "artifact_id": "artifact:49b82edf77de8e07e792:6edc1142d1044e7186b5",
  "text": "[[edit](/w/index.php?title=Provenance&action=edit&section=12 \"Edit section: Whole-system provenance implementation for Linux\")]\n\n* PASS[[70]](#cite_note-70) – closed source – not maintained – kernel v2.6.X\n* Hi-Fi[[71]](#cite_note-71) – open source[[72]](#cite_note-72) – not maintained – kernel v3.2.x\n* Flogger[[73]](#cite_note-73) – closed source – not maintained – kernel v2.6.x\n* S2Logger[[74]](#cite_note-74) – closed source – not maintained – kernel v2.6.x\n* LPM[[75]](#cite_note-75) – open source[[76]](#cite_note-76) – not maintained – kernel v2.6.x\n* Progger[[77]](#cite_note-77)[[65]](#cite_note-:0-65)[[78]](#cite_note-78)[[79]](#cite_note-79) – open source[[80]](#cite_note-80) – not maintained – kernel v2.6.x and kernel v.4.14.x\n* CamFlow[[81]](#cite_note-81)[[82]](#cite_note-82)[[83]](#cite_note-83) – open source[[84]](#cite_note-84) – maintained – kernel v6.0.X",
  "access_class": "public",
  "heading": "Whole-system provenance implementation for Linux",
  "observed_at": "2026-07-18T21:40:59.214Z",
  "state": "active"
}