Resource restriction systems and methods

摘要

Resource restrictions are associated with a user identifier. A resource restriction agent receives operating system calls related for resources and provides resource request data to a resource agent. The resource agent determines whether the resource is restricted based on the resource request data and resource restriction data and generates access data based on the determination. The resource restriction agent grants or denies the system call based on the access data.

主权项

1. A non-transitory machine readable medium storing a resource agent for execution outside of an operating system of a device by a set of processing units of the device, the resource agent comprising sets of instructions for:
at the resource agent executing outside the operating system, receiving a system call from the operating system; determining whether the system call is subject to a resource restriction of at least one of a plurality of types of resource restriction; when the system call is subject to a resource restriction of at least one of the plurality of resource restriction types, causing the operating system to cancel the system call; and when the system call is not subject to a resource restriction of at least one of the plurality of resource restriction types, causing the operating system to allow the system call.