Making Linux Protection Mechanisms Egalitarian With UserFS

Download Now Date Added: Jun 2010
Format: PDF

UserFS provides egalitarian OS protection mechanisms in Linux. UserFS allows any user - not just the system administrator - to allocate Unix user IDs, to use chroot, and to set up firewall rules in order to confine untrusted code. One key idea in UserFS is representing user IDs as files in a /proc-like file system, thus allowing applications to manage user IDs like any other files, by setting permissions and passing file descriptors over Unix domain sockets. UserFS addresses several challenges in making user IDs egalitarian, including accountability, resource allocation, persistence, and UID reuse.