UNIX Guardians: active user intervention in data protection
George I. Davida, Brian J. Matt · 2003
The GUARDNIX system is tailored for user participation in the protection of data. The system, an enhanced 4.2 BSD Unix, utilizes a special class of processes called Guardians to change normally passive files into active objects. Multiple processors are used to physically separate normal processes from the main operating system kernel. Data is provided additional protection by using cryptography. The file directory tree is partitioned, with the subtrees attached to Guardians. GUARDNIX reduces the need for roots and does not allow root processes during normal operations.>