Unlock instant, AI-driven research and patent intelligence for your innovation.

Method and device to manage and control resources used by process

A technology that occupies resources and processes. It is applied in the computer field and can solve problems such as resource occupation, poor container isolation effect, and identification.

Active Publication Date: 2018-05-29
PRANUS BEIJING TECH CO LTD
View PDF8 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] In the prior art, there are some processes that can change permissions in the tasks file, and these processes can change permissions through the CGroup interface, so as not to be limited by the resource description files in the same level directory of the tasks file, because the CGroup interface cannot modify the permissions of the process. Identification, so that some malicious processes change permissions, or some processes change permissions after being maliciously attacked, resulting in malicious occupancy of resources, which in turn leads to poor container isolation

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device to manage and control resources used by process
  • Method and device to manage and control resources used by process

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0078] The embodiment of the present invention provides a method for managing and controlling resource occupation by a process, such as figure 1 Shown, including:

[0079] Step 101: When a resource occupation request message is received, determine the container to which the process sending the resource occupation request message belongs and / or the mode of the current system and / or the type of the resource occupation request message.

[0080] For the embodiment of the present invention, when a resource occupation request message is received, it is determined whether the container to which the process sending the resource occupation request message belongs is a preset container (restricted container) and / or whether the current system mode is strict mode, And / or whether the resource occupation request message is a message requesting expanded access to resources.

[0081] Among them, strict mode is a system mode that does not perform any operation.

[0082] Step 102: Based on the determin...

Embodiment 2

[0085] Another possible implementation manner of the embodiment of the present invention, on the basis of the first embodiment, further includes the operations shown in the second embodiment, wherein:

[0086] Step 101 and step 102 include step a (not marked in the figure) and step b (not marked in the figure), in which,

[0087] Step a: When the resource occupation request message is received, it is determined whether the container to which the process sending the resource occupation request message belongs is a preset container.

[0088] For the embodiment of the present invention, the preset container is a restricted container, that is, if a certain container belongs to the preset container, the process in the container is restricted to perform the operation corresponding to the message requesting expanded access to the resource.

[0089] The method of determining the container of the process sending the resource occupation request message includes: determining the container of the ...

Embodiment 3

[0104] Another possible implementation manner of the embodiment of the present invention, on the basis of the one shown in the first embodiment, further includes the operation shown in the third embodiment, wherein:

[0105] Step 101 and step 102 include step c (not marked in the figure) and step d (not marked in the figure), in which,

[0106] Step c: When the resource occupation request message is received, it is determined whether the resource occupation request message is a message for requesting resource expansion.

[0107] For the embodiment of the present invention, the manner of determining that the resource occupation request message is a message for requesting resource expansion is detailed in Embodiment 2, and will not be repeated here.

[0108] After step c, it further includes: if it is a request to expand the resource, determining whether the container to which the process sending the resource occupation request message belongs is a preset container; if it is not a preset...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

An embodiment of the invention provides a method to manage and control resources used by a process. The method comprises: when a resource usage request message is received, determining a vessel that the process, which sends the resource usage request message, belongs to, and / or mode of a current system, and / or type of the resource usage request message; based on determination results, determiningwhether to execute an operation corresponding to the resource usage request message. The method and device to manage and control resources used by the process provided by the embodiment are applicableto the management and control of resource consumption of processes in a vessel.

Description

Technical field [0001] The present invention relates to the field of computer technology. Specifically, the present invention relates to a method and device for managing and controlling process occupation of resources. Background technique [0002] With the development of information technology, container technology also develops, and the content carried in the container is a series of tasks or processes. A control group (English full name: Control Groups, English abbreviation: CGroup) file system is set in the kernel, and the CGroup file system is used to control the resource occupation of processes in the container. [0003] Under normal circumstances, the CGroup file system will be mounted to the / sys / fs / cgroup directory. There are two types of files in this directory. File 1 is used to describe the controlled resources, and the file name of File 2 is tasks, and its content It includes a series of process ID numbers, or it may be an empty file, and is used to indicate the proce...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F9/50
CPCG06F9/5005
Inventor 高连凯
Owner PRANUS BEIJING TECH CO LTD