The authorization mechanism of operating systems usually puts importance on access control on the bias of taking a file as an isolated object, but ignores the security relationship between files, which implies many flaws.

• 摘要传统的操作系统授权机制，将文件作为孤立的客体进行访问控制，忽略了客体之间的关联所隐含的安全特性，存在诸多安全漏洞。