Union Filesystem Source Directory Protect Architecture

Abstract

Union filesystem has the advantage of providing a single integrated view of files on the same path by eliminating duplication of files on the same path at the mount point. A directory mounted by union filesystem should not be able to have access to that source directory in accordance with the security principle. However, the current operating system does not provide a separate security feature for the directory mounted by the union filesystem. In such an environment, there is a security threat in which unauthorized personnel access the source directory for mounting with union filesystem to create arbitrary files or change critical files. This study proposes an approach control architecture that can protect the directory to mount with union filesystem. The proposed architecture can work at the Kernel Level to block users from bypassing access. In order to verify the effectiveness of the proposed mechanism, the Positive and Negative function tests were conducted in this study. As a result, the proposed union filesystem source directivity architecture has been verified to be effective.