File storage path obtaining method and device

Abstract

The invention discloses a file storage path obtaining method and device, and the method comprises the steps: monitoring the calling of a chroot function, determining a target process for calling the chroot function, and enabling the calling process of the chroot function to map an original catalog of a target file into a root catalog; when the target process operates the target file, obtaining anoriginal directory of the target file; obtaining a storage path of the target file in a root directory; and obtaining an actual storage path of the target file according to the original directory andthe storage path of the target file under the root directory. Due to the fact that the original directory of the target file is obtained, the actual storage path of the target file can be obtained according to the original directory and the storage path of the target file under the root directory, the file accessed by the process is obtained according to the actual storage path, and monitoring ofthe file is achieved.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a method and device for acquiring a file storage path. Background technique [0002] At present, in order to increase the security of the system and facilitate the system development of users, a new Linux environment isolated from the original Linux environment is usually established on the basis of the original Linux environment by means of chroot (change root directory). For Linux chroot environment. The chroot method is a way to change the location of the root directory referenced when the program is executed. Specifically, in the Linux system, the default file storage directory structure of the system starts with " / ", and " / " is the root , and after calling the chroot method, the directory structure of the system will use the specified location as the location of " / ". [0003] In the Linux host protection system, in order to be able to monitor the files accessed by the pr...

AI Technical Summary

Problems solved by technology

[0003] In the Linux host protection system, in order to be able to monitor the files accessed by the process, the actual storage directory of the file needs to be obtained, but when the chroot method is called, the actual storage directory of the file is changed to the root directory, and the file cannot be obtained in the Linux chroot environment The actual storage directory, so the actual storage path of the file cannot be obtained, resulting in the inability to obtain the file accessed by the process, which eventually leads to monitoring failure

Images