Solaris下基于角色访问控制模型的研究与应用  

Research and application on role based access control models of Solaris

作　　者：付兴顺[1] 陈家琪[1] 

机构地区：[1]上海理工大学计算机工程学院,上海200093

出　　处：《计算机工程与设计》2008年第8期1952-1954,共3页Computer Engineering and Design

基　　金：上海市教育委员会科研基金项目(04EB12)

摘　　要：操作系统作为信息系统的基础,其安全性不容忽视。访问控制是维护和保证系统安全的重要方式,而基于角色访问控制(RBAC)是访问控制领域新兴的热点。以Sun公司的开源操作系统Solaris为例,分析了RBAC模型的结构和工作原理,同时,对Solaris下角色访问控制的具体实现进行了研究,提出了一种针对超级用户权限的控制方法,更好地实现了最小特权原则。As the basis of the information system, operating system is very important, so its security can＇t be omitted. Access control, is one important way to maintain and guarantee the system security, and role-base access control model becomes the new hotspot in the field of access control. Solaris is taken, the open-source system of SUN Company, as example, analyzes the structure, working principle and realization of role-base access control model. A research on the implementation of RBAC is made, and a new method for control the root user to realize the principle of least privilege better is given.

关 键 词：角色 权限 访问控制 多级安全 最小特权原则 职责分离 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]