Filesystem with Interactive Access Control for Linux
fedir
1ddbef6a65
The main.c was completely replaced by one of the libfuse examples: [passthrough_fh.c](https://github.com/libfuse/libfuse/blob/master/example/passthrough_fh.c) . This choice is made based on that there is little point in spending time on reinventing the wheel by reimplementing passthrough all over again. Also, the [passthrough_hp.cc](https://github.com/libfuse/libfuse/blob/master/example/passthrough_hp.cc) wasn't used because it uses a vastly different and much more comlex API, even though the authors claim it to be faster. |
||
|---|---|---|
| docs | ||
| sources | ||
| .gitignore | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
ICFS -- Interactively Controlled File System
Motivation
Traditional access control mechanisms in operating systems allow the same level of access to all processes running on behalf of the same user. This typically enables malicious processes to read and/or modify all data accessible to the user running a vulnerable application. It can be dealt using various mandatory access control mechanisms, but these are often complicated to configure and are rarely used in common user oriented scenarios. This thesis focuses on design and implementation of a file system layer which delegates the decision to allow or deny access to a file system object by a specific process to the user.
Goals
- Analyze the problem and design a solution
- Implement the solution using the FUSE framework
- Test the solution and demonstrate its benefits
Docs
Credit
Student: Fedir Kovalov
Supervisor: RNDr. Jaroslav Janáček, PhD.