The authorization mechanism of operating systems usually puts importance on access control on the bias of taking a file as an isolated object, but ignores the security relationship between files, which implies many flaws.
英
美
- 摘要传统的操作系统授权机制,将文件作为孤立的客体进行访问控制,忽略了客体之间的关联所隐含的安全特性,存在诸多安全漏洞。