請(qǐng)問(wèn)什么是多實(shí)例目錄?

kiongf

  polyinstantiated directories?
  我在一些系統(tǒng)安全相關(guān)的文檔上接觸到這個(gè)概念，有沒(méi)有大俠能夠解釋下？

Tinnal

回復(fù) 1# kiongf


   原因下面這兩個(gè)網(wǎng)頁(yè)說(shuō)得很清楚。
https://access.redhat.com/docume ... ed-directories.html
http://www.ibm.com/developerworks/library/l-polyinstantiation/

The /tmp/ and /var/tmp/ directories are normally used for temporary storage by all programs, services, and users. Such setup, however, makes these directories vulnerable to race condition attacks, or an information leak based on file names. SELinux offers a solution in the form of polyinstantiated directories. This effectively means that both /tmp/ and /var/tmp/ are instantiated, making them appear private for each user. When instantiation of directories is enabled, each user's /tmp/ and /var/tmp/ directory is automatically mounted under /tmp-inst and /var/tmp/tmp-inst.

實(shí)現(xiàn)的原理是：
http://www.ibm.com/developerwork ... mespaces/index.html