主权项 |
1. A method for controlling access to operating system (OS) resources, comprising:
creating, by a hardware processor, an OS resource associated with a first program; assigning, by the hardware processor, a unique label to the first program; associating, by the hardware processor, the unique label with the OS resource; and configuring, by the hardware processor, a resource descriptor of the OS resource to allow access to the OS resource to processes having the same unique label as the first program, and to deny access to the OS resource to processes having a different label. |