Be extremely careful if your trusted program will share a directory with potentially untrusted users 如果您可信任的程序将要与潜在的非信任用户共享一个目录,那么要特别小心。
For example , a trusted program could create a file in such a directory , and an untrusted user could delete and rename 例如,一个可信任的程序可以在这样一个目录下创建一个文件,而一个不受信任的用户可以删除或者重命名它。
Among the implemented security modules in knumen , are well known ones , like mac , acl and audit modules , as well as specially designed ones , like important process protection and trusted program authorization modules 在knumen的安全模块中,既有实现普通安全功能的模块,如mac模块、 acl模块、审计模块等,也有负责完成特殊安全功能的模块,如重要进程保护模块和可信进程授权模块。