Filesystem with Interactive Access Control for Linux
Go to file
fedir 93588036aa Implemented GUI with zenity
Now the program is completely functional and is using zenity dialogues.
`sources` directory was renamed to `src`. UI related stuff was moved to
`src/gui/ui`.
2025-02-07 12:42:51 +01:00
docs Added old docs 2024-11-13 16:27:09 +01:00
src Implemented GUI with zenity 2025-02-07 12:42:51 +01:00
.gitignore Fixed gitignore doing nothing 2024-11-17 20:30:09 +01:00
LICENSE Initial commit 2024-11-13 15:26:45 +01:00
Makefile Updated Makefile 2025-02-07 12:38:36 +01:00
README.md Reformatted README 2024-11-17 20:23:00 +01:00

ICFS -- Interactively Controlled File System

Motivation

Traditional access control mechanisms in operating systems allow the same level of access to all processes running on behalf of the same user. This typically enables malicious processes to read and/or modify all data accessible to the user running a vulnerable application. It can be dealt using various mandatory access control mechanisms, but these are often complicated to configure and are rarely used in common user oriented scenarios. This thesis focuses on design and implementation of a file system layer which delegates the decision to allow or deny access to a file system object by a specific process to the user.

Goals

  • Analyze the problem and design a solution
  • Implement the solution using the FUSE framework
  • Test the solution and demonstrate its benefits

Docs

Credit

Student: Fedir Kovalov

Supervisor: RNDr. Jaroslav Janáček, PhD.