SYSTEM FOR ACCESSING A KERNEL SPACE OF AN OPERATING SYSTEM WITH ACCESS CONTROL FUNCTIONALITY

摘要

In an operating system with access control functionality, a request for afunction that requireskernel space access can be initiated by an application and executed in thekernel space using amanagement mechanism having access to the kernel space. An applicationcontainer withinwhich the application executes includes a signaling mechanism permitted toaccess a messagebus external to the application container using an access control policy ofthe operating system.The signaling mechanism signals that a message associated with the request isto be processedwith kernel space access. An access control policy of the operating systempermits the signalingmechanism to access a message bus used to transmit the message to themanagementmechanism. The management mechanism executes the function in the kernel spaceresponsive toreceiving the message from the message bus and determining that the functionrequires kernelspace access.