fedir/ICFS
1
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases Wiki Activity

Updated README.md with usage and build instructions

Browse Source
This commit is contained in:
BritishTeapot 2025-02-10 12:02:42 +01:00
parent 5f5b7ffda6
commit 71cc127a32
1 changed files with 19 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
README.md
View File

@ -2,14 +2,7 @@
## Motivation
Traditional access control mechanisms in operating systems allow the same level
of access to all processes running on behalf of the same user. This typically
enables malicious processes to read and/or modify all data accessible to the
user running a vulnerable application. It can be dealt using various mandatory
access control mechanisms, but these are often complicated to configure and are
rarely used in common user oriented scenarios. This thesis focuses on design
and implementation of a file system layer which delegates the decision to allow
or deny access to a file system object by a specific process to the user.
Traditional access control mechanisms in operating systems allow the same level of access to all processes running on behalf of the same user. This typically enables malicious processes to read and/or modify all data accessible to the user running a vulnerable application. It can be dealt using various mandatory access control mechanisms, but these are often complicated to configure and are rarely used in common user oriented scenarios. This thesis focuses on design and implementation of a file system layer which delegates the decision to allow or deny access to a file system object by a specific process to the user.
## Goals
@ -17,6 +10,24 @@ or deny access to a file system object by a specific process to the user.
- Implement the solution using the FUSE framework
- Test the solution and demonstrate its benefits
## Building
* Install dependencies
+ fuse, libfuse (v3 or later)
- Debian: `sudo apt install fuse3 libfuse3-dev`
+ zenity
- Debian: `sudo apt install zenity`
* Build using `make`:
+ In the project directory: `make`
+ Use `make DEBUG=1` for testing.
* Resulting binaries should appear in the `build` directory.
## Usage
`icfs <FUSE arguments> [target directory]`
The filesystem will be mounted over the target directory, and ask user permission every time a file in that directory is opened.
## Docs
- [Initial idea and motivation](./docs/bc-thesis-idea.md)