parent
8a6d90a136
commit
065bb22932
20
README.md
20
README.md
@ -2,7 +2,14 @@
|
||||
|
||||
## Motivation
|
||||
|
||||
Traditional access control mechanisms in operating systems allow the same level of access to all processes running on behalf of the same user. This typically enables malicious processes to read and/or modify all data accessible to the user running a vulnerable application. It can be dealt using various mandatory access control mechanisms, but these are often complicated to configure and are rarely used in common user oriented scenarios. This thesis focuses on design and implementation of a file system layer which delegates the decision to allow or deny access to a file system object by a specific process to the user.
|
||||
Traditional access control mechanisms in operating systems allow the same level
|
||||
of access to all processes running on behalf of the same user. This typically
|
||||
enables malicious processes to read and/or modify all data accessible to the
|
||||
user running a vulnerable application. It can be dealt using various mandatory
|
||||
access control mechanisms, but these are often complicated to configure and are
|
||||
rarely used in common user oriented scenarios. This thesis focuses on design
|
||||
and implementation of a file system layer which delegates the decision to allow
|
||||
or deny access to a file system object by a specific process to the user.
|
||||
|
||||
## Goals
|
||||
|
||||
@ -10,17 +17,6 @@ Traditional access control mechanisms in operating systems allow the same level
|
||||
- Implement the solution using the FUSE framework
|
||||
- Test the solution and demonstrate its benefits
|
||||
|
||||
## Building
|
||||
|
||||
* Install dependencies
|
||||
+ fuse, libfuse (v3 or later)
|
||||
- Debian: `sudo apt install fuse3 libfuse3-dev`
|
||||
+ zenity
|
||||
- Debian: `sudo apt install zenity`
|
||||
* Build using `make`:
|
||||
+ In the project directory: `make`
|
||||
* Resulting binaries should appear in the `build` directory.
|
||||
|
||||
## Docs
|
||||
|
||||
- [Initial idea and motivation](./docs/bc-thesis-idea.md)
|
||||
|
Loading…
Reference in New Issue
Block a user