A file import method and apparatus, a computing device, and a storage medium

Abstract

The application discloses a file import method and device, a computing device and a storage medium. The file import method is executed in a computing device, and the computing device is arranged with a first operating system. The method comprises the following steps: when a file import request is received, a second operating system is constructed; under the second operating system, a file is checked, and file information is output; it is judged whether the file information meets an import condition; when the file information meets the import condition, the file is imported into the first operating system.

Description

[0001] This application is a divisional application of an invention patent application filed on August 30, 2021, with original application number 2021110005001 and invention title: A file import method, apparatus, computing device and storage medium. Technical Field

[0002] This invention relates to the field of computer technology, and more specifically to a file import method, apparatus, computing device, and storage medium. Background Technology

[0003] Linux, short for GNU / Linux, is a free and open-source Unix-like operating system. It inherits the network-centric design philosophy of Unix and is a stable, multi-user network operating system that is widely used.

[0004] However, the Linux system lacks functions for checking the integrity, installation, and dependencies of imported files. Imported files require checks using a vendor-specified app (e.g., 360 Security Protection System), and all these checks are encapsulated within the vendor's own app, not provided to developers with access to the system API. In other words, the Linux system itself does not have built-in filtering or checking capabilities for imported files. Summary of the Invention

[0005] In view of the above problems, the present invention is proposed to provide a file import method, apparatus, computing device, and storage medium that overcomes or at least partially solves the above problems.

[0006] According to one aspect of the present invention, a file import method is provided, executed in a computing device having a first operating system disposed thereon, the method comprising: upon receiving a file import request, constructing a second operating system; under the second operating system, inspecting the file and outputting file information; determining whether the file information meets import conditions; and if the file information meets the import conditions, importing the file into the first operating system.

[0007] Optionally, in the file import method according to the present invention, the step of constructing a second operating system when a file import request is received includes: generating a file inspection tool according to preset inspection items; and storing the file inspection tool in the root file target directory of the first operating system to form a second operating system.

[0008] Optionally, in the file import method according to the present invention, the step of checking the file and outputting file information under the second operating system includes: checking the integrity and size of the file; determining the file type; if the file is an executable file, performing a security check on the executable file; if the file is an installation package file, performing an installation and dependency check on the installation package file; and summarizing all the check results to generate file information and output it.

[0009] Optionally, in the file import method according to the present invention, the import conditions include: the file information and the preset configuration information can match each other, wherein the configuration information is stored in a first operating system.

[0010] Optionally, in the file import method according to the present invention, after the step of importing the file into the first operating system when the file information meets the import conditions, the method further includes the step of deleting the second operating system.

[0011] Optionally, in the file import method according to the present invention, after the step of determining whether the file information meets the import conditions, the method further includes the step of deleting the second operating system when the file information does not meet the import conditions.

[0012] Optionally, in the file import method according to the present invention, before the step of checking the file and outputting file information under the second operating system, the method further includes the step of importing the file into the second operating system based on the chroot tool.

[0013] According to another aspect of the present invention, a file import apparatus is provided, which is coupled to an application disposed on a first operating system. The apparatus includes: a file checking module, adapted to construct a second operating system upon receiving a file import request sent by the application, to check the file under the second operating system, and to output file information; and a file saving module, adapted to receive the file information, determine whether the file information meets the import conditions, and to import the file into the first operating system when the file information meets the import conditions.

[0014] Optionally, in the file import device according to the present invention, the file inspection module includes: a second operating system construction submodule, adapted to construct a second operating system; an import submodule, adapted to import a file into the second operating system; a file inspection submodule, adapted to inspect the received file; a file information generation submodule, adapted to generate file information of the file; and an export submodule, adapted to export the file information to the file saving module.

[0015] Optionally, in the file import apparatus according to the present invention, the file checking module further includes a deletion submodule, adapted to delete a second operating system.

[0016] According to another aspect of the present invention, a computing device is provided, comprising: at least one processor; and a memory storing program instructions, wherein the program instructions are configured to be executed by the at least one processor, the program instructions including instructions for performing the methods described above.

[0017] According to another aspect of the present invention, a readable storage medium storing program instructions is provided, which, when read and executed by a computing device, causes the computing device to perform the method described above.

[0018] According to the present invention, a "temporary file system (second operating system)" is built in the root directory of the Linux system (first operating system), and the file inspection and filtering function is implemented in the temporary file system. This supplements the inspection and filtering function of external file import system that is lacking in the Linux system itself, provides convenience for system users, and meets the need to monitor the external file import system without purchasing third-party tools.

[0019] According to the present invention, the file import inspection function of the Linux system is integrated into a temporary file system, existing in the system as a tool and service. Third-party applications that download files to the Linux system can directly use this temporary file system (second operating system) to implement the file inspection function. The specific content of the file inspection can be freely designed according to the inspection development specifications, meeting the inspection needs of most users for importing external files into the system.

[0020] According to the present invention, by setting import conditions, Linux system users can restrict the size, type, security and other attributes of foreign files imported into the system. Only target files that meet the import conditions will be imported into the system, thus realizing the filtering function of Linux system users for importing foreign files into the system.

[0021] The above description is merely an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention and to implement it in accordance with the contents of the specification, and in order to make the above and other objects, features and advantages of the present invention more apparent and understandable, specific embodiments of the present invention are described below. Attached Figure Description

[0022] Various other advantages and benefits will become apparent to those skilled in the art upon reading the following detailed description of preferred embodiments. The accompanying drawings are for illustrative purposes only and are not intended to limit the invention. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings:

[0023] Figure 1A schematic diagram of a computing device 100 according to an embodiment of the present invention is shown;

[0024] Figure 2 A flowchart of an operating system installation method 200 according to an embodiment of the present invention is shown;

[0025] Figure 3 A timing diagram of an operating system installation method according to an embodiment of the present invention is shown;

[0026] Figure 4 A schematic diagram illustrating the packaging of configuration files and installer source code files according to an embodiment of the present invention is shown;

[0027] Figure 5 A flowchart of a method 500 for operating a file import apparatus according to an embodiment of the present invention is shown. Detailed Implementation

[0028] Exemplary embodiments of the present disclosure will now be described in more detail with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.

[0029] Currently, when importing external files into a Linux system, the process typically involves using an app provided by the software vendor to check and filter the files. The Linux system itself does not have the capability to perform integrity checks, installation tests, or dependency analyses on imported files.

[0030] For example, commonly used file checking and filtering apps include: 360 Security Protection System (Domestic Innovation Edition), 360 Security Browser V10 (Domestic Innovation Edition), etc.

[0031] This app-based approach to checking and filtering incoming files has the following problems:

[0032] 1) Users need to make a purchase; otherwise, the security of the system cannot be guaranteed.

[0033] 2) It cannot be provided to all developers who can obtain the system API;

[0034] 3) It limited the promotion of the operating system.

[0035] To address the problems existing in the prior art, the present invention is proposed. One embodiment of the present invention provides a file import method that can be executed on a computing device. Figure 1 A structural diagram of a computing device 100 according to an embodiment of the present invention is shown. Figure 1 As shown, in the basic configuration 102, the computing device 100 typically includes system memory 106 and one or more processors 104. Memory bus 108 can be used for communication between processor 104 and system memory 106.

[0036] Depending on the desired configuration, processor 104 can be any type of processor, including but not limited to: microprocessor (μP), microcontroller (μC), digital information processor (DSP), or any combination thereof. Processor 104 may include one or more levels of cache such as L1 cache 110 and L2 cache 112, processor core 114, and registers 116. Example processor core 114 may include an arithmetic logic unit (ALU), floating-point unit (FPU), digital signal processing core (DSP core), or any combination thereof. Example memory controller 118 may be used with processor 104, or in some implementations, memory controller 118 may be an internal part of processor 104.

[0037] Depending on the desired configuration, system memory 106 can be any type of memory, including but not limited to: volatile memory (such as RAM), non-volatile memory (such as ROM, flash memory, etc.), or any combination thereof. Physical memory in a computing device typically refers to volatile RAM, and data on a disk needs to be loaded into physical memory before it can be read by processor 104. System memory 106 may include operating system 120, one or more applications 122, and program data 124. Application 122 is actually a series of program instructions that instruct processor 104 to perform corresponding operations. In some embodiments, application 122 may be arranged to execute instructions on the operating system by one or more processors 104 using program data 124. Operating system 120 may be, for example, Linux, which includes program instructions for handling basic system services and performing hardware-dependent tasks. Application 122 includes program instructions for implementing various user-desired functions, and application 122 may be, for example, a browser, instant messaging software, software development tools (such as integrated development environments (IDEs), compilers, etc.), but is not limited to these. When application 122 is installed on computing device 100, a driver module can be added to operating system 120.

[0038] When computing device 100 starts up, processor 104 reads and executes program instructions from memory 106 of operating system 120. Application 122 runs on operating system 120, utilizing interfaces provided by operating system 120 and underlying hardware to implement various user-expected functions. When user starts application 122, application 122 is loaded into memory 106, and processor 104 reads and executes program instructions from memory 106 of application 122.

[0039] The computing device 100 also includes a storage device 132, which includes a removable storage device 136 and a non-removable storage device 138, both of which are connected to a storage interface bus 134.

[0040] The computing device 100 may also include an interface bus 140 that facilitates communication from various interface devices (e.g., output devices 142, peripheral interfaces 144, and communication devices 146) to the basic configuration 102 via a bus / interface controller 130. Example output devices 142 include a graphics processing unit 148 and an audio processing unit 150. They may be configured to facilitate communication with various external devices such as displays or speakers via one or more A / V ports 152. Example peripheral interfaces 144 may include a serial interface controller 154 and a parallel interface controller 156, which may be configured to facilitate communication with external devices such as input devices (e.g., keyboards, mice, pens, voice input devices, touch input devices) or other peripherals (e.g., printers, scanners, etc.) via one or more I / O ports 158. Example communication devices 146 may include a network controller 160, which may be arranged to facilitate communication with one or more other computing devices 162 via a network communication link through one or more communication ports 164.

[0041] A network communication link can be an example of a communication medium. A communication medium can typically be embodied in a modulated data signal, such as a carrier wave or other transmission mechanism, and can include any information delivery medium. A “modulated data signal” can be a signal whose data set, or whose modifications, can be encoded with information within the signal. As a non-limiting example, a communication medium can include wired media such as wired networks or leased lines, and various wireless media including sound, radio frequency (RF), microwave, infrared (IR), or other wireless media. The term “computer-readable medium” as used herein can include both storage media and communication media.

[0042] The computing device 100 also includes a storage interface bus 134 connected to a bus / interface controller 130. The storage interface bus 134 is connected to a storage device 132 adapted to perform data storage. An example storage device 132 may include a removable storage device 136 (e.g., CD, DVD, USB flash drive, removable hard drive, etc.) and a non-removable storage device 138 (e.g., hard disk drive HDD, etc.).

[0043] In the computing device 100 according to the present invention, application 122 includes a plurality of program instructions for executing method 200.

[0044] Figure 2 A flowchart of a method 200 according to an embodiment of the present invention is shown. Method 200 is adapted to be executed in a computing device (e.g., the aforementioned computing device 100), on which a first operating system is arranged.

[0045] like Figure 2 As shown, the purpose of method 200 is to implement a file import method, starting from step S202, in which a second operating system is constructed when a file import request is received. In this embodiment, external files can be imported through third-party applications or tools deployed on the computing device (e.g., WeChat, QQ, email, browser, etc.), or through a physical interface (e.g., through a USB interface). This embodiment does not limit this.

[0046] The second operating system is a temporarily constructed file system that integrates various inspection tools for checking imported files. It's worth noting that these inspection tools can be customized based on the type of the imported file. For example, if the imported file is an executable file, inspection tools can be configured for executable files; if it's an installation package file, inspection tools can be configured for installation packages, and so on. Alternatively, they can be configured based on the user's focus on file attributes, such as file size, file integrity, and file security.

[0047] In some embodiments, the specific construction method for the second operating system can be implemented according to the following steps:

[0048] First, a file inspection tool is generated based on preset inspection items. These preset items are user-defined and include, but are not limited to, the following: file size, file integrity, file type, and file security. File types can be broadly categorized into regular files, executable files, and installation package files. Regular files include text files, Office files, PDF files, and audio / video files. Executable files are files that can be loaded and executed by the operating system, such as script files and ELF files. Installation package files are software installation packages, which are collections of self-extracting files, including all files required for software installation.

[0049] Then, the file inspection tools are stored in the root target directory of the first operating system to form the second operating system. Specifically, an empty folder (i.e., the target directory) can be created in the root directory of the first operating system, and the generated file inspection tools can be copied to this folder to form a temporary file system integrating various inspection tools.

[0050] It should be noted that the resulting second operating system can be compressed to generate a second file system compressed package, so that when a file import request is received, the second file system compressed package can be directly decompressed to obtain the second operating system.

[0051] In addition, multiple compressed packages of the second operating system can be pre-built, each corresponding to different check items. For example, the check tool in the first compressed package can check the file size, the check tool in the second compressed package can check the file integrity, and so on. When a file import request is received, the corresponding compressed package is decompressed to form the second file system.

[0052] In step S204, the file is checked under the second operating system, and file information is output. Specifically, the file can be imported into the second operating system using the chroot tool. chroot stands for Change Root, which can change the root directory location referenced by the program during execution. By using chroot, the file's download path is modified to the second operating system to execute the check process.

[0053] In some embodiments, step S204 includes the following sub-steps:

[0054] First, check the integrity and size of the file.

[0055] Then, determine the file type;

[0056] If the file is an executable file, then a security check is performed on the executable file;

[0057] If the file is an installation package file, then perform installation and dependency checks on the installation package file;

[0058] Finally, all inspection results are summarized into a file and output.

[0059] In a specific example, refer to Figure 3 , Figure 3 A flowchart of a document inspection method 300 according to an embodiment of the present invention is shown.

[0060] exist Figure 3 In the method 300, the accuracy of the obtained file is determined by checking its integrity. The storage space occupied by the obtained file is determined by checking its size. Further, based on the file type, the security and attributes of the file are checked in detail. For example, the executable file's symbol table is read to determine whether the executable file has undergone security hardening compilation (i.e., a security check of the executable file). The file information and installation dependency information in the installation package are obtained, and the installation package file and its dependencies are checked. Finally, all the check results are summarized to generate file information.

[0061] In step S206, it is determined whether the file information meets the import conditions. These import conditions include determining whether the file information matches preset configuration information. The preset configuration information is generated based on the aforementioned preset check items. For example, the preset check items can be used to predict the check results that meet the requirements for importing into the first system, and the configuration information is generated based on these check results.

[0062] In step S208, if the file information meets the import conditions, the file is imported into the first operating system. Specifically, the chroot tool is used to import the qualified file from the second operating system into the first operating system.

[0063] If the file information does not meet the import conditions, the second operating system will be deleted. Since the second operating system is essentially a file directory, and the files are pre-existing in this second operating system, the imported files will be deleted along with the second operating system.

[0064] Additionally, to reduce memory consumption, the second operating system can be deleted after the file import to the first operating system is complete. A new second operating system can then be rebuilt upon receiving the next file import request.

[0065] The file import method 200 provided in this embodiment offers a system-level security check and filtering mechanism for importing external files. Compression technology is used to compress the temporary root file system into a "temporary root file system compressed package," which is stored in the "main system." When an external file is imported, the interface of this solution is called to decompress the "temporary root file system compressed package" and create a "temporary system." The chroot tool is used to enter the "temporary system" to check the external file, indirectly isolating the external file checking environment from the "main system" environment. The tool for checking target files in the "temporary system" can be customized as needed, and the check results are output as "file information." The "configuration file" can be customized by the Linux system user according to their needs. The "file information" and the "configuration file" information must correspond one-to-one; only files that meet the requirements of the "configuration file" will be imported into the "main system" by the file saving service module. Only one external file is checked at a time, and the "temporary system" is deleted after the file operation is completed.

[0066] Figure 4 A structural diagram of a file import device 400 according to an embodiment of the present invention is shown. The file import device 400 is coupled to an application disposed on a first operating system. The device 400 includes a file checking module 420 and a file saving module 440 coupled to each other.

[0067] According to one embodiment, when the file inspection module 420 receives a file import request sent by the application, it constructs a second operating system, inspects the file under the second operating system, and outputs file information. The file saving module 440 receives the file information sent by the file inspection module, determines whether the file information meets the import conditions, and imports the file into the first operating system if the file information meets the import conditions.

[0068] Specifically, the file inspection module 420 includes a second operating system construction submodule 422, an import submodule 424, a file inspection submodule 426, a file information generation submodule 428, an export submodule 4210, and a deletion submodule 4212, which are coupled in sequence.

[0069] Second Operating System Construction Submodule 422 constructs the second operating system.

[0070] Import submodule 424 imports the file into the second operating system.

[0071] The file inspection submodule 426 inspects the received files.

[0072] The file information generation submodule 428 generates the file information of the file.

[0073] The export submodule 4210 exports file information to the file saving module.

[0074] Deleting submodule 4212 will remove the second operating system.

[0075] In a specific example, such as Figure 5 As shown, Figure 5 A flowchart of a method 500 for operating a file import apparatus according to an embodiment of the present invention is shown.

[0076] In method 500, firstly, a file inspection tool is generated based on preset inspection items. Then, a second operating system is generated by storing the file inspection tool in a first operating system. Next, the received files are imported into the second operating system. Specifically, files can be imported into the second operating system using the chroot tool. The file inspection process is executed, and file information is generated. The file information is matched against configuration information; if a match is found, the file is imported into the first operating system; otherwise, the file is deleted. Finally, the second operating system is deleted.

[0077] It should be noted that the working principle of the file import device 400 provided in this embodiment is similar to that of the file import method 200 provided in the foregoing embodiment. For related aspects, please refer to the description of the file import method 200 above, which will not be repeated here.

[0078] The various techniques described herein can be implemented in combination with hardware or software, or a combination thereof. Thus, the methods and apparatus of the present invention, or certain aspects or portions thereof, can take the form of program code (i.e., instructions) embedded in a tangible medium, such as a removable hard disk, USB flash drive, floppy disk, CD-ROM, or any other machine-readable storage medium, wherein when the program is loaded into and executed by a machine such as a computer, the machine becomes an apparatus for practicing the present invention.

[0079] When the program code is executed on a programmable computer, the computing device generally includes a processor, a processor-readable storage medium (including volatile and non-volatile memory and / or storage elements), at least one input device, and at least one output device. The memory is configured to store program code; the processor is configured to execute the method of the present invention according to instructions in the program code stored in the memory.

[0080] By way of example, and not limitation, readable media include readable storage media and communication media. Readable storage media stores information such as computer-readable instructions, data structures, program modules, or other data. Communication media generally embodies computer-readable instructions, data structures, program modules, or other data in the form of modulated data signals such as carrier waves or other transmission mechanisms, and includes any information delivery medium. Any combination of the above is also included within the scope of readable media.

[0081] In the specification provided herein, the algorithms and displays are not inherently related to any particular computer, virtual system, or other device. Various general-purpose systems can also be used with the examples of this invention. The required structure for constructing such systems is apparent from the above description. Furthermore, this invention is not directed to any particular programming language. It should be understood that the contents of the invention described herein can be implemented using various programming languages, and the above description of specific languages ​​is for the purpose of disclosing preferred embodiments of the invention.

[0082] Numerous specific details are set forth in the specification provided herein. However, it will be understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures, and techniques have not been shown in detail so as not to obscure the understanding of this specification.

[0083] Similarly, it should be understood that, in order to simplify this disclosure and aid in understanding one or more aspects of the invention, various features of the invention are sometimes grouped together in a single embodiment, figure, or description thereof in the foregoing description of exemplary embodiments of the invention. Those skilled in the art will understand that modules, units, or components of the devices in the examples disclosed herein can be arranged in the devices described in that embodiment, or alternatively, can be located in one or more devices different from the devices in this example. The modules in the foregoing examples can be combined into a single module or further divided into multiple sub-modules.

[0084] Those skilled in the art will understand that the modules in the device of the embodiment can be adaptively changed and placed in one or more devices different from that embodiment. Modules, units, or components in the embodiment can be combined into a single module, unit, or component, and further, they can be divided into multiple sub-modules, sub-units, or sub-components.

[0085] Furthermore, those skilled in the art will understand that although some embodiments described herein include certain features included in other embodiments but not others, combinations of features from different embodiments are meant to be within the scope of the invention and form different embodiments.

[0086] Furthermore, some of the embodiments described herein are methods or combinations of method elements that can be implemented by a processor of a computer system or by other means of performing the functions. Therefore, a processor having the necessary instructions for implementing the methods or method elements forms means for implementing the methods or method elements. Furthermore, the elements described herein in the apparatus embodiments are examples of means for implementing the functions performed by elements for the purposes of carrying out the invention.

[0087] As used herein, unless otherwise specified, the use of ordinal numbers such as “first,” “second,” “third,” etc., to describe ordinary objects merely indicates different instances of similar objects and is not intended to imply that the objects being described must have a given order in time, space, ordering, or any other manner.

[0088] Although the invention has been described with respect to a limited number of embodiments, those skilled in the art will understand from the foregoing description that other embodiments are conceivable within the scope of the invention described herein. Furthermore, it should be noted that the language used in this specification has been chosen primarily for readability and edibility purposes, and not for the purpose of explaining or limiting the subject matter of the invention.

Claims

1. A file import method, executed in a computing device, wherein a first operating system is arranged on the computing device, and the first operating system is a Linux operating system, the method comprising: constructing a second operating system when receiving a file import request; checking the file under the second operating system, and outputting file information; determining whether the file information meets an import condition; and importing the file into the first operating system when the file information meets the import condition, wherein the import condition comprises that the file information and preset configuration information can match each other, and the configuration information is stored in the first operating system. The step of checking the file under the second operating system and outputting the file information comprises: checking integrity and size of the file; determining a file type of the file; performing security checking on an executable file if the file is the executable file; performing installation and dependency checking on an installation package file if the file is the installation package file; and generating and outputting the file information by summarizing all checking results. After the step of importing the file into the first operating system when the file information meets the import condition, the method further comprises: deleting the second operating system. After the step of determining whether the file information meets the import condition, the method further comprises: deleting the second operating system when the file information does not meet the import condition. Before the step of checking the file under the second operating system and outputting the file information, the method further comprises: importing the file into the second operating system based on a chroot tool.

2. The method of claim 1, wherein, 6.A file import apparatus, coupled with an application arranged on a first operating system, wherein the first operating system is a Linux operating system, the apparatus comprising: a file checking module, adapted to construct a second operating system when receiving a file import request sent by the application, check a file under the second operating system, and output file information; and a file saving module, adapted to receive the file information, determine whether the file information meets an import condition, and import the file into the first operating system when the file information meets the import condition, wherein the import condition comprises that the file information and preset configuration information can match each other, and the configuration information is stored in the first operating system. 7.A computing device, comprising: at least one processor; and a memory storing program instructions configured to be executed by the at least one processor, wherein the program instructions comprise instructions for performing the method of any one of claims 1-5. 8.A readable storage medium storing program instructions, which, when read and executed by a computing device, cause the computing device to perform the method of any one of claims 1-5. ​ ​ ​ 3. The method of claim 1, wherein, ​ ​ 4. The method of claim 1, wherein, ​ ​ 5. The method of claim 1, wherein, ​ ​ ​ ​ ​ ​ ​ ​ ​

Images