Security protection method for operation system command

Abstract

The invention provides a security protection method for an operation system command. A command white list file comprising all operation commands allowed to be executed is configured and encrypted, and an encryption key is stored in a credible security chip, so that the security of the command white list file can be effectively protected and prevented from being stolen or tampered; all the operation commands in the command white list file are stored in a kernel space in the form of a command linked list structure; and when a kernel space execution command executes a processing function, whether the operation command can be executed or not can be judged by judging whether the to-be-executed operation command is in a command white list file list or not. According to the method, the operation commands of an operation system are managed through a method of configuring the command white list file, so that a superuser can be prevented from executing any operation command by utilizing a right of the superuser, the execution of an illegal operation command of a malicious program is avoided, the security of the operation system commands is improved, and the system security is enhanced.

Description

technical field [0001] The invention relates to a safety protection method for operating system commands, which belongs to the technical field of information safety. Background technique [0002] The operation commands of the operating system are composed of a series of executable programs. Each command is used to complete a specific function. According to different user rights, the executable operation commands are also different. For example, in the UNIX system, file operation commands include read, Write, execute, etc., the super user (root user) can execute all operation commands, the user who owns the file (owner user) can execute all file operation commands on the file, the group user (group user) can execute read and execute commands on the file, other users (other user) cannot perform any operation commands on files. [0003] The operation commands of the existing operating system have the following security problems: super users can set the permissions of group use...

AI Technical Summary

Problems solved by technology

[0003] The operation commands of the existing operating system have the following security problems: super users can set the permissions of group users and other users, so that group users and other users can execute commands that they do not have permission to execute, which brings security risks to the system; malicious users Once a malicious program is installed, the illegal commands during its execution will damage the system or illegally steal data, causing serious security problems; the operating system key is generally stored in a file or hard-coded in the program, there greater security risk

Images