公开(公告)号：US09477538B2

公开(公告)日：2016-10-25

申请号：US14486646

申请日：2014-09-15

Applicant: ORACLE INTERNATIONAL CORPORATION

Inventor： Frederick S. Glover ,  Diane Lebel ,  Thomas J. Engle ,  Angelo Pruscino

IPC: G06F9/54 ,  G06F9/46 ,  G06F11/30

CPC classification number: G06F9/545 ,  G06F9/468 ,  G06F11/3034

Abstract: The approaches described herein provide support for application specific policies for conventional operating systems. In an embodiment, a kernel module representing a kernel subsystem is executed within an operating system's kernel. The kernel subsystem may be configured to respond to particular requests with one or more default actions. Additionally, the kernel subsystem may define a number of sub-modules which represent application specific policies that deviate from the default actions. Each sub-module may define one or more sets of conditions which indicate when the sub-module is applicable to a request and one or more sets of corresponding actions to take when the conditions are met. When an application sends a request to the kernel subsystem, the kernel subsystem determines whether the request meets the conditions of a particular sub-module. If the particular sub-module's conditions are met, the kernel subsystem performs the corresponding actions of the particular sub-module.

Abstract translation: 本文描述的方法为常规操作系统的应用特定策略提供支持。 在一个实施例中，表示内核子系统的内核模块在操作系统的内核中被执行。 内核子系统可以被配置为用一个或多个默认动作响应特定请求。 此外，内核子系统可以定义多个子模块，这些子模块表示偏离默认动作的应用程序特定策略。 每个子模块可以定义一个或多个条件集合，其指示子模块何时可应用于请求以及满足条件时要采取的一组或多组相应动作。 当应用程序向内核子系统发送请求时，内核子系统确定请求是否满足特定子模块的条件。 如果满足特定子模块的条件，则内核子系统执行特定子模块的相应动作。