18327553. Process Launch Constraints simplified abstract (Apple Inc.)
Contents
Process Launch Constraints
Organization Name
Inventor(s)
David P. Remahl of Woodside CA (US)
Kyle C. Brogle of San Francisco CA (US)
Robert J. Kendall-kuppe of Rockville MD (US)
Pavlo Malynin of Fremont CA (US)
Geoffrey Mccormack of San Jose CA (US)
Process Launch Constraints - A simplified explanation of the abstract
This abstract first appeared for US patent application 18327553 titled 'Process Launch Constraints
Simplified Explanation
Abstract
A kernel of an operating system receives a request from a parent process to launch a child process that executes a binary. The kernel evaluates a process-specific launch constraint, which is a precondition for launching the child process. The constraint can match against various system states or variables. The kernel determines whether to launch the child process based on the evaluation of the constraint.
- The kernel receives a request from a parent process to launch a child process.
- The kernel evaluates a process-specific launch constraint as a precondition for launching the child process.
- The launch constraint can match against different system states or variables.
- The kernel decides whether to launch the child process based on the evaluation of the constraint.
Potential Applications
- Operating systems can use this technology to enforce specific launch conditions for child processes.
- It can be used to impose preconditions on parent processes before launching child processes.
- Launch constraints can be embedded in the launch request, binary, or stored in a trust cache in kernel memory.
Problems Solved
- This technology allows for the enforcement of launch constraints, ensuring that certain conditions are met before launching a child process.
- It provides a mechanism for parent and child processes to impose preconditions on each other.
- Launch constraints can be used to enhance security and control over the execution of processes.
Benefits
- Improved security by enforcing launch constraints and preconditions.
- Increased control over the execution of processes.
- Flexibility in defining launch constraints based on various system states or variables.
Original Abstract Submitted
A kernel of an operating system receives a request from a parent process (e.g., an exec or spawn system call) to launch a child process that executes a binary. The kernel identifies a process-specific launch constraint, which is a precondition for launching the child process. The kernel evaluates the constraint, which can match against any type of system state or variable, including the process's location on disk, protection on disk, and how the process is to be launched. The kernel can then determine whether to launch the child process, thus permitting the child process to be scheduled for execution by the operating system. Launch constraints can be used both for a child process to impose preconditions on the parent process, and vice versa. Launch constraints can be included in the launch request, embedded in the binary, or located elsewhere, such as in a trust cache in kernel memory.
