EARP: Principled Storage, Sharing, and Protection for Mobile Apps

摘要

Traditionally, operating systems have provided abstractions and protection for storing and sharing data. For example, the data model in UNIX is byte streams, stored in files protected by owner ID and permission bits and accessed via file descriptors. UNIX has a uniform access-control model for both storage and inter-process communication: users specify permissions on files, pipes, and sockets, and the OS enforces these permissions.