KasperskyOS Community Edition 1.0

VFS: overview

The VFS component contains the implementations of file systems and the network stack. POSIX calls for working with file systems and the network are sent to the VFS component, which then calls the block device driver or network driver, respectively.

Multiple copies of the VFS component can be added to a solution to separate the data streams of different entities. Each VFS copy is built separately and can contain the entire VFS functionality or a specific part of it, for example:

• One or more file systems
• Network stack
• Network stack and network driver

The VFS component can be used either directly (through static linking) or via IPC (as a separate entity). Use of VFS functionality via IPC enables the solution developer to do the following:

• Use a solution security policy to control method calls that work with the network and file systems.
• Connect multiple client entities to one VFS entity.
• Connect one client entity to two VFS entities to separately work with the network and file systems.