METHOD AND SYSTEM FOR EXTENDING SELINUX POLICY WITH ENFORCEMENT OF FILE NAME TRANSLATIONS

摘要

An operating system identifies a request of a process to create, in a file system of the computing device, a new object, the new object having a name. The operating system identifies a policy rule applicable to the new object using a label of the process, a label of a parent object pertaining to the new object, a class of the new object, and the name of the new object. The operating system creates a label for the new object using the applicable policy rule and associates the new object with the associated label.