一种基于管理员分权的用户特权提升机制

当前Linux系统通过限制root用户登录来防止管理员滥用权限,仅在需要执行特权操作时才允许普通用户临时提升至管理员特权。然而现有Linux系统中用户特权提升机制仅支持将权限提升至root,在启用管理员分权的安全操作系统中无法区分不同管理员的特权提升,致使用户无法处理相应的管理操作。在通过定制SELinux策略实现操作系统管理员分权的基础上,设计支持管理员分权的用户特权提升机制,根据不同特权应用的权限需求对用户权限进行验证,只有通过验证的用户才能将权限提升至应用指定的管理员特权。该机制采用DBus总线结构隔离普通用户权限与管理员特权,并利用SELinux策略对用户特权提升服务的安全性进行保护。实验结果表明,通过该机制可以有效地将普通用户权限提升至系统配置指定的管理员特权。

The exploration of middle managers＇ performance evaluation indicators

The core role of middle managers in the enterprises, plays an important role in the whole enterprise. Yet all round the teacher talked about a lot of companies, including layer of managers＇ performance status is not as good as executives expected. This paper mainly studies the present enterprise, the real role of middle managers, and their performance status, and middle managers in the performance of the existing problems and the analysis of the present situation of the listed in the reason, and put forward relevant countermeasures according to the actual situation. The results show that the middle managers performance evaluation become a mere formality, most managers see performance appraisal as a burden and form; Middle managers set of assessment index and the use of problems; The right job analysis is the key to design middle managers performance evaluation indicators; In the proper selection of performance indicators is significant for middle managers to improve performance; Performance indicators weights allocation to improve the teaching quality of middle managers performance influence; Design middle tube is the main body of performance appraisal index of middle performance increase.