Unlock instant, AI-driven research and patent intelligence for your innovation.

Method and device for managing and controlling process occupation of resources

A technology that occupies resources and processes, applied in the computer field, can solve the problems of poor container isolation, identification, resource occupation, etc., and achieve the effect of improving the effect.

Active Publication Date: 2021-12-31
PRANUS BEIJING TECH CO LTD
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] In the prior art, there are some processes that can change permissions in the tasks file, and these processes can change permissions through the CGroup interface, so as not to be limited by the resource description files in the same level directory of the tasks file, because the CGroup interface cannot modify the permissions of the process. Identification, so that some malicious processes change permissions, or some processes change permissions after being maliciously attacked, resulting in malicious occupancy of resources, which in turn leads to poor container isolation

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for managing and controlling process occupation of resources
  • Method and device for managing and controlling process occupation of resources

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0078] The embodiment of the present invention provides a method of controlling the resource of the control process, such as figure 1 As shown, including:

[0079] Step 101: When receiving a resource occupancy request message, it is determined that the transmission resource occupies the container to which the request message belongs and / or the current system mode and / or the type of resource occupies the type of request message.

[0080] For the embodiment of the present invention, when the resource occupies the request message, it is determined whether the container belonging to the process of sending the resource occupies the request message is the preset container (restricted container) and / or determines whether the mode of the current system is strict mode, And / or resource occupancy request messages are messages that request to expand access resources.

[0081] Among them, strict mode is a system model that does not perform any operation.

[0082] Step 102, based on the...

Embodiment 2

[0085] Another possible implementation manner of the embodiment of the present invention, on the basis of the first embodiment, and includes the operation shown in Example 2, wherein

[0086] Step 101, step 102 includes step a (not labeled in the figure) and step B (not marked in the figure), where

[0087] Step A. When receiving a resource occupancy request message, it is determined whether the container belonging to the process of sending a resource occupying the request message is a preset container.

[0088] For the embodiment of the present invention, the preset container is a restricted container, that is, if a container belongs to the preset container, the process in the container is restricted to perform a message corresponding to the request to expand the message.

[0089] Determining the way to send a resource occupying the request message, including: Determine the process of sending resources occupying the request message based on the process of sending resources occupy...

Embodiment 3

[0104] Another possible embodiment of the embodiment of the present invention, on the basis of the embodiment, and includes the operation shown in Example 3, wherein

[0105] Step 101, step 102 includes step c (not labeled in the figure) and step d (not labeled in the figure), where

[0106] Step C. When receiving the resource occupancy request message, it is determined whether the resource occupancy request message is a message requesting to expand the resource.

[0107] For the embodiment of the present invention, it is determined that the resource occupancy request message is a message requested to enlarge the resource, and details are not described herein.

[0108] After step c, it is also included that if a message requested to expand the resource, it is determined whether the container in which the sending resource occupies the request message is a preset container; if it is not a preset container, the resource occupancy request message corresponds to the operation.

[0109]...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

An embodiment of the present invention provides a method for managing and controlling resources occupied by a process. The method includes: when receiving a resource occupation request message, determining the container to which the process sending the resource occupation request message belongs and / or the mode of the current system and / or the The type of the resource occupation request message, and then based on the determination result, determine whether to execute the operation corresponding to the resource occupation request message. Embodiments of the present invention provide a method and device for managing and controlling resources occupied by processes, which are suitable for controlling the resources occupied by processes in a container.

Description

Technical field [0001] The present invention relates to computer technologies, and particularly, the present invention relates to a method and apparatus for process control resource occupation. Background technique [0002] With the development of information technology, container technology also will be developed, the contents of the container carried by a series of tasks or processes. Kernel provided with control groups (English name: Control Groups, abbreviation: CGroup) file system, CGroup file system for case management and control within the container resource-intensive process. [0003] In general, CGroup file system will be mounted at / sys / fs / cgroup directory, wherein there are two files in the directory, a file resource description for the control file named Tasks 2, the contents of which the process includes a series of ID numbers, or it may be an empty file, and the process used to indicate that these resources controlled role. If a process ID in the file tasks, i...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): G06F9/50
CPCG06F9/5005
Inventor 高连凯
Owner PRANUS BEIJING TECH CO LTD