Method for defining application program authority based on Linux system and electronic device

Abstract

The invention discloses a method for defining the application program authority based on a Linux system and an electronic device. The method comprises the following steps of: adding the files accessible to application program into white list through namespace provided by the Linux system kernel in advance, and adding the files inaccessible to application program into a blacklist; adding the systemcall executable by an application program to the white list through a system calculation provided by a Linux system kernel, and adding a system call unexecutable by the application program to the blacklist, so that the application is prevented from accessing files in the blacklist or making system calls in the blacklist, even with the highest permissions, and accordingly, the users can accuratelycontrol files that are accessible and inaccessible to your application, as well as system calls that are not executable by the application and system calls that are executable.

Description

technical field [0001] The invention relates to the field of Linux operating systems, in particular to a method and electronic equipment for defining application program permissions based on the Linux system. Background technique [0002] Currently, in the Linux system, not only application programs can access process information, but also application programs can directly access system files of the Linux system. For example, direct access to the control panel and more. [0003] For security, scholars propose a method to define permission access. Specifically, when application A obtains system permissions, then application A can access system files or access process information of other applications; on the contrary, when application B does not obtain system permissions, then application B cannot Access system files or access process information for other applications. [0004] Although this method is simple and effective, this traditional permission control method only s...

AI Technical Summary

Problems solved by technology

[0009] In view of the above-mentioned deficiencies in the prior art, the purpose of the present invention is to provide a method and electronic device for defining application program permissions based on the Linux system, aiming to solve the problem in the prior art that the access authority or execution authority of the application program cannot be accurately controlled

Images