A method and system for selinux dynamic authorization

A dynamic authorization and storage system technology, applied in transmission systems, digital transmission systems, instruments, etc., can solve the problems of consumption, tediousness, multiple time costs and labor costs, and achieve high flexibility, improve efficiency, reduce time costs and The effect of labor costs

Active Publication Date: 2022-03-18
KYLIN CORP
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, for relatively complex and huge programs, the above method is very cumbersome and will consume more time and labor costs

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A method and system for selinux dynamic authorization
  • A method and system for selinux dynamic authorization
  • A method and system for selinux dynamic authorization

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0058]In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiment of the application will be clearly and completely described below in conjunction with the accompanying drawings in the embodiment of the application. Obviously, the described embodiment is only It is a part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.

[0059] Embodiments of the present invention are described in detail below, examples of which are shown in the drawings, wherein the same or similar reference numerals designate the same or similar elements or elements having the same or similar functions throughout. The embodiments described below by referring to the figures are exemplary and are intended to explain...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method and system for SELinux dynamic authorization. By analyzing, classifying, storing, and reporting logs containing SELinux interception information, security policy rules are generated according to the information, and the release timing and specific time limit of the policy are controlled. , which implements SELinux dynamic authorization. The SELinux dynamic authorization method proposed by the present invention has the characteristics of high flexibility and strong practicability, can improve the efficiency of resource authorization in the current SELinux system, and reduce the time cost and labor cost of the process.

Description

technical field [0001] The present application relates to the technical field of computer operating system security, in particular to a method and system for SELinux dynamic authorization. Background technique [0002] Security-Enhanced Linux (Security-Enhanced Linux, SELinux) is a Linux kernel module and a security subsystem of Linux. SELinux is an implementation of Mandatory Access Control (MAC), which uses security policies to enforce the access allowed by the system. Under the restriction of this access control system, a process can only access the resources it needs in its tasks, and the resources outside the allowed range will be prohibited by the system. [0003] The SELinux rule base is implemented in a "white list" manner, that is, all permitted operations must be explicitly defined by type enforcement rules, otherwise the operation is deemed prohibited. On the operating system where the SELinux policy is deployed, the system software needs to be adapted to the SE...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): G06F21/60H04L9/40
CPCG06F21/604H04L63/1441H04L63/1425H04L63/20
Inventor 冷春莹吴长昊田运暖屈宁杨诏钧魏立峰孔金珠谌志华
Owner KYLIN CORP
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap