Unverified50% confidenceFactExact time
Classic implementations of runtime enforcement include Linux's seccomp, SELinux's mandatory access control (MAC), and runtime application self-protection (RASP) in web applications.
1
Sources
50%
Confidence
Long-term
Relevance
10/13/2026
First Seen
Sources
Related Entities
Related Claims
Unverified使用 Linux 的 seccomp 限制系统调用范围、通过 AppArmor/SELinux 配置强制访问控制策略可用于落地最小权限原则71% similarUnverifiedTraditional operating systems achieve context isolation through sandboxes or process isolation, while in web security the same-origin policy plays a similar role.62% similarUnverifiedmacOS's security sandbox mechanism imposes stricter permission controls on global input monitoring, requiring users to manually enable accessibility permissions, making implementation more difficult and compliance review costs higher.61% similarUnverified传统 Unix 权限模型（基于 UID/GID 的 DAC 自主访问控制）假设同一用户的进程互信，这一假设在现代开发者工作站上已过时61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1015940API
curl https://kongchang.com/api/v1/knowledge/claims/1015940MCP
get_claim(id=1015940)