next up previous contents
Next: Interfaces for the Kernel Up: Integrating Flexible Support for Previous: System Call Controls   Contents


Access Vector Cache

The access vector cache (AVC) is a new operating system component that provides caching of access decision computations to minimize the performance overhead of the Flask security mechanisms. This section describes the set of interfaces provided by the AVC to the kernel object managers. It then describes the set of interfaces provided by the AVC to the security server. Finally, this section describes the implementation of the AVC.



Subsections