Method and system for safe operation of shell script based on sandbox technology

Abstract

The invention discloses a sandbox technology-based safe operation method and system for shell scripts. The shell script security operating system of the sandbox technology includes a controllable environment, a security manager, security policies and resources; the controllable environment is used to identify controllable commands, uncontrollable commands or custom permissions from shell scripts; dynamically Create a sandbox and implement the security policy of the controllable command, uncontrollable command or custom permission; the security manager is used to extract the security policy of the controllable command, uncontrollable command or custom permission; the security policy is used Used to define the commands that are allowed to execute, and the resources that the commands can access. The invention runs the shell script in a controllable environment, and can effectively prevent malicious commands in the shell script from harming the system. The security manager provides a variety of security policies for the operation of shell commands, which limits the access rights of commands to resources in the sandbox and greatly enhances the security of script execution.

Description

technical field [0001] The invention relates to the field of information system security, in particular to a method and system for safely running shell scripts based on sandbox technology. Background technique [0002] Shell scripting refers to a method of executing several commands in a computer. Shell scripts can be textual or graphical. Shell tools include shell commands such as directory listing (ls), file movement (mv) and deletion (rm). A shell script is stored in a file and contains a set of shell commands. Shell commands can access important resources within your computer. At present, the security used by the shell is provided by the operating system, mainly based on user identity. For example, user A can read and write B files, but user C cannot. [0003] There are more and more programs and scripts downloaded through the Internet and other means, and there is an urgent need for a method of restricting the downloaded potentially malicious codes from accessing co...

AI Technical Summary

Problems solved by technology

The above-mentioned operating system security policy based on user identity cannot provide security protection for unknown and possible malicious scripts

Images