Computer system for file access control function, has security module which determines whether user space application is authorized to access file utilizing access rules stored in database

摘要

A database has access rules defining which compartments are authorized to access particular file resources. A kernel module receives system call to access a file from a user space application belonging to the compartment. A security module determines whether the user space application is authorized to access the file utilizing access rules stored in the database. Independent claims are included for the following: (1) file access controlling method; and (2) computer readable medium storing access controlling program.