fedir/ICFS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updated README

Browse Source
This commit is contained in:
fedir 2025-06-11 19:59:28 +02:00
parent 2ebc450132
commit 012fa05e8f
Signed by: fedir
GPG Key ID: C959EE85F0C9362C
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
README.md
View File

@ -1,5 +1,9 @@
# ICFS -- Interactively Controlled File System # ICFS -- Interactively Controlled File System
> [!IMPORTANT]
> If you need the version that correponds to the thesis attachment, go [here](https://git.umbrasolis.de/fedir/ICFS/src/commit/2f4f1a0a569704b770f50b3e7cf39c09b9b8381a). This version contains corrections that the opponent brought to my attention.
## Motivation ## Motivation
Traditional access control mechanisms in operating systems allow the same level of access to all processes running on behalf of the same user. This typically enables malicious processes to read and/or modify all data accessible to the user running a vulnerable application. It can be dealt using various mandatory access control mechanisms, but these are often complicated to configure and are rarely used in common user oriented scenarios. This thesis focuses on design and implementation of a file system layer which delegates the decision to allow or deny access to a file system object by a specific process to the user. Traditional access control mechanisms in operating systems allow the same level of access to all processes running on behalf of the same user. This typically enables malicious processes to read and/or modify all data accessible to the user running a vulnerable application. It can be dealt using various mandatory access control mechanisms, but these are often complicated to configure and are rarely used in common user oriented scenarios. This thesis focuses on design and implementation of a file system layer which delegates the decision to allow or deny access to a file system object by a specific process to the user.
@ -15,6 +19,10 @@ Traditional access control mechanisms in operating systems allow the same level
- Install dependencies - Install dependencies
- libfuse3 - libfuse3
- Debian: `sudo apt install fuse3 libfuse3-dev` - Debian: `sudo apt install fuse3 libfuse3-dev`
- SQLite3
- Debian: `sudo apt install libsqlite3-dev`
- GTK4, libadwaita
- Debian: `sudo apt install libgtk-4-dev libadwaita-dev`
- Build tools - Build tools
- Debian: `sudo apt install gcc make pkg-config` - Debian: `sudo apt install gcc make pkg-config`
- Build using `make`: - Build using `make`: