METHOD AND SYSTEM FOR THE SUPPORT OF APPLICATION SPECIFIC POLICIES FOR CONVENTIONAL OPERATING SYSTEMS

摘要

The approaches described herein provide support for application specific policies for conventional operating systems. In an embodiment, a kernel module representing a kernel subsystem is executed within an operating system's kernel. The kernel subsystem may be configured to respond to particular requests with one or more default actions. Additionally, the kernel subsystem may define a number of sub-modules which represent application specific policies that deviate from the default actions. Each sub-module may define one or more sets of conditions which indicate when the sub-module is applicable to a request and one or more sets of corresponding actions to take when the conditions are met. When an application sends a request to the kernel subsystem, the kernel subsystem determines whether the request meets the conditions of a particular sub-module. If the particular sub-module's conditions are met, the kernel subsystem performs the corresponding actions of the particular sub-module.

主权项

1. A method comprising:
executing a module within a kernel of an operating system, wherein the module includes a plurality of sub-modules and each sub-module of the plurality of sub-modules is configured to detect a respective one or more conditions and cause execution of a respective one or more corresponding actions when the one or more conditions are met; the module receiving a command from an administrative configuration tool executing in user space which specifies to modify the respective one or more conditions of a particular sub-module of the plurality of sub-modules; the module modifying the respective one or more conditions of the particular sub-module based on the command while the particular sub-module is executing within the kernel; and wherein the method is performed by one or more computing devices.