Loading patent…
AssigneeInternational Business Machines Corporation
InventorsRodney Carlton Burnett, Timothy Simon Bartley, Michael Powell
Estimating the term…
The method of the invention assumes there is a security manager and mechanism present for defining, attaching, and evaluating external authorization policy to file resources based on the file's path name. In this invention, protected symbolic links and the resources that the link points to are stored in a protected object database. When a system access attempt occurs, the file attribute is extracted from the file used in the access. The file attribute is then used to search the protected object database. If a matching system resource is found, and that resource is protected but does not have independent security policy on it, then the resource will have the security policy of a symbolic link that points to it. In this case, the security of each protected symbolic link pointing to the system resource has to grant access in order for allowance of the access attempt. This approach insures that the most restrictive outcome prevails.
A method for controlling access to a computing system resource, being accessed through a symbolic link file, with an externally stored resource comprising the steps of:
A method for controlling access to a computing system device being accessed through symbolic link, said access control being implemented through an externally stored resource and comprising the steps of:
A computer program product in a computer readable medium for controlling access to a computing system resource, being accessed through a symbolic link file, with an externally stored resource comprising the steps of:
A computer connectable to a distributed computing system, which included symbolic links pointing to system resources and comprising:
A method for restricting the creation of a protected symbolic link that names a system resource comprising the steps of:
Dependencies are inferred from the claim text.