Abstract:
A capability management method and apparatus, a computer device, and the like relate to permission management of a kernel object in an operating system, for example, permission management of a kernel object in a microkernel architecture. In the method, two types of information are stored in a capability node of a capability owner: information used to indicate that a capability is granting and information used to indicate a granted capability. A capability association relationship between a grantor and a grantee is established by recording the two types of information, so that capability copying is avoided in a capability granting procedure, and capability deletion is avoided in a procedure of rejecting a capability by the grantee, thereby ensuring a deterministic latency while implementing capability revocation and granting. The method may be applied to a smartphone system, an unmanned driving system, or the like.
Abstract:
Embodiments of the present invention provide a method and an apparatus for processing redo data in a database, where the method includes: generating redo data according to a database modification operation, accordingly saving the redo data in a buffer allocated to each application thread, saving an identifier of the application thread in a time sequence queue after a time sequence queue lock is acquired; and determining that a data reading condition is satisfied, reading a sequence of the identifiers of the application threads from the time sequence queue, successively reading a piece of redo data from the buffer of each application thread corresponding to the identifier of each application thread in the time sequence queue, and writing the piece of redo data to a redo queue. Redo data processing efficiency can be improved by separating a time sequence queue from a data queue.
Abstract:
A method for handling a trusted execution environment operating system crash is provided. The method includes: when it is detected, in a running process of a security service, that a TEE OS crashes, an electronic device stores a hardware status parameter of a TEE and a security context of an REE that are obtained when the TEE OS crashes, and suspends the security service; the electronic device restarts the TEE OS; the electronic device sets, based on the stored hardware status parameter of the TEE, a hardware status parameter of the TEE obtained after the TEE OS is restarted; the electronic device sets, based on the stored security context of the REE, a security context of the REE obtained after the TEE OS is restarted and a context of the TEE obtained after the TEE OS is restarted; and the electronic device restores the security service.
Abstract:
An air deflection system includes a cabinet and an air deflection cabinet. The cabinet includes a cabinet first air vent on a lower part of a cabinet first side, a cabinet second air vent at a top of the cabinet, and a cabinet third air vent on a cabinet second side for cool air to enter. The air deflection cabinet includes an air deflection cabinet first air vent at a top of the air deflection cabinet and an air deflection cabinet second air vent on an air deflection cabinet first side that is proximate to the cabinet first side. The air deflection cabinet second air vent is in communication with the cabinet first air vent such that warm air exhausted through the cabinet first air vent enters the air deflection cabinet through the air deflection cabinet second air vent and is exhausted through the air deflection cabinet first air vent.
Abstract:
Example inter-process communication methods and apparatus are descried. One example method includes writing, based on a calling convention, communication information into a register group of a first execution entity of a sending process. First data of target data is written into a stack memory of the first execution entity. The communication information includes a first value indicating a data amount of the first data, and the target data is data to be sent by the sending process to a first receiving process. Information in the register group of the first execution entity is replicated to a context of the first execution entity. The first data from the stack memory of the first execution entity is replicated to a stack memory of a second execution entity of the first receiving process based on the first value in the context of the first execution entity and the address of the stack memory.
Abstract:
This application provides a security control method and a computer system. A first domain and a second domain are deployed in the computer system, the second domain is more secure than the first domain, a program is deployed in the first domain, and a control flow management module and an audit module are deployed in the second domain. The second domain is more secure than the first domain. When the program in the first domain is executed, the control flow management module obtains control flow information by using a tracer. The audit module audits the to-be-audited information according to an audit rule, and when the to-be-audited information matches the audit rule, determines that the audit succeeds and then allows the first domain to perform a subsequent operation, for example, to access a secure program in the second domain.
Abstract:
A security control method and a computer system are provided. A first domain and a second domain are deployed in the computer system, the second domain is more secure than the first domain, a program is deployed in the first domain, and a control flow management module and an audit module are deployed in the second domain. The second domain is more secure than the first domain. When the program in the first domain is executed, the control flow management module obtains control flow information by using a tracer. The audit module audits the to-be-audited information according to an audit rule, and when the to-be-audited information matches the audit rule, determines that the audit succeeds and then allows the first domain to perform a subsequent operation, for example, to access a secure program in the second domain.
Abstract:
An air deflection system includes a cabinet, where an air vent is disposed on a side of the cabinet, the air vent is located in a lower part of the side, an air vent is disposed at the top of the cabinet, and the cabinet is provided with a side for cool air to enter; and further includes at least one air deflection cabinet, where an air vent is disposed at the top of the air deflection cabinet, the air-vent-disposed side of the air deflection cabinet clings to the air-vent-disposed side of the cabinet, and the side air vent of the air deflection cabinet is in communication with the side air vent of the cabinet. By means of the air deflection system, bottom warm air is exhausted from the top, which improves efficiency of warm air processing of an equipment room.
Abstract:
Embodiments of the present invention provide a method and an apparatus for processing redo data in a database, where the method includes: generating redo data according to a database modification operation, accordingly saving the redo data in a buffer allocated to each application thread, saving an identifier of the application thread in a time sequence queue after a time sequence queue lock is acquired; and determining that a data reading condition is satisfied, reading a sequence of the identifiers of the application threads from the time sequence queue, successively reading a piece of redo data from the buffer of each application thread corresponding to the identifier of each application thread in the time sequence queue, and writing the piece of redo data to a redo queue. Redo data processing efficiency can be improved by separating a time sequence queue from a data queue.