Isolation operation method for Linux application program

Abstract

The invention provides an isolation operation method for a Linux application program. The method includes the following steps that a sandbox of sources needed by operation of the Linux application program is configured for the Linux application program, and an independent file system, the maximum percent of occupied CPU time, a bound CPU core and the maximum memory in use are configured for the sandbox; the independent file system is converted into a root directory of the Linux application program; the Linux application program is bound to the bound CPU core configured in the sandbox corresponding to the Linux application program; when an interruption happens, whether the access time of the current process on a CPU is longer than the maximum access time on the CPU in a time period corresponding to the maximum percent of the occupied CPU time is judged, and if yes, the process outside the sandbox is switched to; the memory used in operation of the Linux application program is detected in real time, and operation of the Linux application program is ended when the memory is larger than the maximum memory in use. According to the isolation operation method, isolation between application programs and isolation between application programs and an operation system are achieved, and it is ensured that malicious application programs cannot threaten the operation system.

Description

technical field [0001] The invention belongs to the technical field of computers, and more specifically relates to a method for isolated running of Linux application programs. Background technique [0002] When the application program is executed on the linux operating system, it needs to use various resources provided by the linux operating system, mainly including CPU, memory, file system, and the like. Among them, the CPU provides the function of interpreting computer instructions and processing data in computer software. The memory provides the function of storing the calculation data of the CPU and the data exchanged with external memory such as hard disk. The file system provides applications with the functions of creating, opening, reading, modifying, and deleting data files. [0003] When users use the Linux operating system, some applications they use may perform illegal operations, leading to serious security problems. For example, some applications will maliciou...

AI Technical Summary

Problems solved by technology

[0003] When users use the Linux operating system, some applications they use may perform illegal operations, leading to serious security problems. For example, some applications will maliciously occupy system resources, hinder the normal execution of other programs, and even cause the system to freeze and cannot be maintained. ;When the application program used by the user needs to access the network, it may download malicious programs from unsafe sites. These malicious programs may steal the user's sensitive information, etc., and interfere with the user's daily work, data security and personal privacy, etc.

Images