CN102289628A - Sandbox-technology-based shell script security operating method and system - Google Patents

Abstract

The invention discloses a sandbox technology-based safe operation method and system for shell scripts. The shell script security operating system of the sandbox technology includes a controllable environment, a security manager, security policies and resources; the controllable environment is used to identify controllable commands, uncontrollable commands or custom permissions from shell scripts; dynamically Create a sandbox and implement the security policy of the controllable command, uncontrollable command or custom permission; the security manager is used to extract the security policy of the controllable command, uncontrollable command or custom permission; the security policy is used Used to define the commands that are allowed to execute, and the resources that the commands can access. The invention runs the shell script in a controllable environment, and can effectively prevent malicious commands in the shell script from harming the system. The security manager provides a variety of security policies for the operation of shell commands, which limits the access rights of commands to resources in the sandbox, greatly enhancing the security of script execution.

Description

Method and system for safe operation of shell script based on sandbox technology

technical field

The invention relates to the field of information system security, in particular to a method and system for safely running shell scripts based on sandbox technology. the

Background technique

Shell scripting refers to a method of executing several commands in a computer. Shell scripts can be textual or graphical. Shell tools include shell commands such as directory listing (ls), file movement (mv) and deletion (rm). A shell script is stored in a file and contains a set of shell commands. Shell commands can access important resources within your computer. At present, the security used by the shell is provided by the operating system, mainly based on user identity. For example, user A can read and write B files, but user C cannot. the

There are more and more programs and scripts downloaded through the Internet and other means, and there is an urgent need for a method of restricting the downloaded potentially malicious codes from accessing computer resources. The above-mentioned operating system security policy based on user identity cannot provide security protection for unknown and possible malicious scripts. Users may run malicious scripts unconsciously. Once the script is executed in the context authorized by the user, the commands in the script have all the access rights related to the user, which can destroy the related resources of the user's permissions. For example, user A executes Script X, script X maliciously destroys file B. the

Contents of the invention

Aiming at the above-mentioned problems existing in the prior art, the present invention provides a method and system for safely running shell scripts based on sandbox technology. the

The present invention provides a shell script security operating system based on sandbox technology, including a controllable environment, a security manager, security policies and resources;

Controllable environment for identifying controllable commands, uncontrollable commands or custom permissions from shell scripts; dynamically creating sandboxes and implementing security policies for the controllable commands, uncontrollable commands or custom permissions;

A security manager, used to extract the controllable command, uncontrollable command or security policy of custom permission;

Security policies are used to define the commands that are allowed to be executed and the resources that the commands can access. the

In one example, the security policy includes a security policy for shell commands, a security policy for applications, a security policy for resource access, a security policy for owner permissions, and a security policy for user permissions. the

In one example, controllable commands are general shell commands and specific application commands; uncontrollable commands are commands without security policies; custom permissions implement permission settings by calling specific programs

In one example, resources include files, directories, and processes. the

The present invention provides a method for safe operation of shell scripts based on sandbox technology, comprising:

Step 1, the controllable environment identifies controllable commands, uncontrollable commands or custom permissions from shell scripts;

Step 2, the security manager extracts the security policy of the controllable command, uncontrollable command or custom permission;

Step 3, the controllable environment dynamically creates a sandbox and implements the security policy of the controllable command, uncontrollable command or custom permission, and the sandbox executes the commands in the shell script. the

In an example, the controllable commands are general shell commands and specific application commands; the uncontrollable commands are commands without security policies; and the custom permission implements permission setting by calling a specific program. the

In one example, the number of sandboxes is 1 or more. the

In one example, the security policy includes a security policy for shell commands, a security policy for applications, a security policy for resource access, a security policy for owner permissions, and a security policy for user permissions. the

The invention runs the shell script in a controllable environment, and can effectively prevent malicious commands in the shell script from harming the system. The security manager provides a variety of security policies for the operation of shell commands, which limits the access rights of commands to resources in the sandbox and greatly enhances the security of script execution. the

Description of drawings

The present invention will be described in further detail below in conjunction with accompanying drawing, wherein:

Fig. 1 is a schematic diagram of the composition of the present invention's shell script security operation system based on sandbox technology;

Fig. 2 is the flow chart of the safe operation method of shell script based on sandbox technology of the present invention;

Fig. 3 is a technical block diagram of the controllable environment in the present invention. the

Detailed ways

Fig. 1 shows the structure of the shell script safe running system based on the sandbox technology of the present invention. This computer system comprises operating system, shell script, controllable environment, security policy, security manager and accessible resource, wherein controllable environment, security policy, security manager constitute the present invention's shell script safe running system based on sandbox technology . A typical computer contains an operating system. Shell scripts can be downloaded from the network, hard disk, CD, etc. These scripts can be safe or unsafe. The scripts can run in the foreground or in the background. The source and code of the script will affect the security manager What kind of security policy to adopt. the

The controllable environment refers to the shell applying the security policy of the present invention, and shell scripts can be run on the shell. The controlled environment can configure (eg load) security policies for the execution of shell scripts and create sandboxes to enforce security policies. the

The security manager refers to a security policy manager related to shell commands, which can dynamically detect various security parameters when creating a sandbox environment. The security parameters are one or more security policies stored in the computer, which may be existing security policies for creating an operating system, such as user rights, or user-defined security policies when creating a sandbox environment. the

Security policies are used to define which commands are allowed to execute and the resources that commands can access. The security policy can be used for the security policy of the shell command, the security policy of the application program, the security policy of the resource access, the security policy of the owner authority and the security policy of the user authority, etc. the

Resources include files, directories, processes and other resources. During the execution of the shell, a shell script may need to access resources to execute commands, and the security manager can implement corresponding security protection for the access of various resources through the identification and execution of security policies. the

Fig. 2 is the flow chart of the shell security management method based on the sandbox technology of the present invention, showing how the present invention executes the shell script in a controllable environment, and the specific steps are as follows:

Step 1: The controllable environment identifies controllable commands, uncontrollable commands, and custom permissions from shell scripts. Controllable commands refer to some common shell commands (for example, ls, rm, cp, mv) and specific application commands (for example, data backup and recovery tools). Uncontrollable commands refer to commands without a security policy. This type of command may be potentially harmful, and they can only be run under the permission of the security policy. Custom permissions are invoked by the security manager from the library before granting access to resources. This type of custom permission implements advanced permission settings by calling specific programs, for example, you can customize time-based resource access policies. the

Step 2: The security manager extracts security policies for each controllable command, uncontrollable command, and custom permission. According to the security policy configured in the system, the security manager establishes corresponding security policies for the controllable commands, uncontrollable commands and custom permissions in the shell script currently to be executed. the

Step 3: The controllable environment dynamically creates a sandbox and implements controllable commands, uncontrollable commands and corresponding security policies for custom permissions. According to parameters such as user identity and resource access rights in the security policy, one or more sandboxes can be dynamically created, and security policies can be implemented on the sandboxes.

Step 4: The sandbox executes the commands in the shell script. the

Fig. 3 further illustrates the controllable environment, shell command and sandbox in the present invention. Shell scripts can be run in a controlled environment. Objects related to the running of shell scripts include shell commands (controllable and uncontrollable commands), custom permissions, resources, and security policies. Commands in shell scripts can be run in one or more sandboxes that enforce security policies. Security policy instances are associated with shell commands and the resources they request, enforced in the sandbox. Custom permissions can be customized by users when creating sandboxes. The present invention creates a safe operating environment for shell scripts through the combination of multiple security policies from multiple aspects of shell operation and sandbox technology. the

What is described is only a preferred embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can make appropriate changes or changes within the technical scope disclosed in the present invention, and such changes or changes should be covered within the protection scope of the present invention. the

Claims (8)

1. the shell script safe operation system based on the sandbox technology is characterized in that, comprises controllable environment, security manager, security strategy and resource;

Controllable environment is used for from the identification of shell script controlled order, uncontrollable order or self-defined permission; Dynamically create sandbox and implement the security strategy of described controlled order, uncontrollable order or self-defined permission;

Security manager is used to extract the security strategy of described controlled order, uncontrollable order or self-defined permission;

Security strategy be used to define the order that allows execution, and order can accessed resources.

2. the shell script safe operation system based on the sandbox technology as claimed in claim 1, it is characterized in that security strategy comprises the security strategy of shell-command, the security strategy of application program, the security strategy of resource access, the security strategy of owner's authority and the security strategy of user right.

3. the shell script safe operation system based on the sandbox technology as claimed in claim 1 is characterized in that, controlled order is general shell-command and application-specific order; Uncontrollable order is the order that does not have security strategy; Self-defined permission realizes the authority setting by calling specific program.

4. the shell script safe operation system based on the sandbox technology as claimed in claim 1 is characterized in that resource comprises file, catalogue and process.

5. the shell script method for safe operation based on the sandbox technology is characterized in that, comprising:

Step 1, controllable environment are discerned controlled order, uncontrollable order or self-defined permission from the shell script;

Step 2, security manager are extracted the security strategy of described controlled order, uncontrollable order or self-defined permission;

Step 3, controllable environment are dynamically created sandbox and are implemented the security strategy of described controlled order, uncontrollable order or self-defined permission, and sandbox is carried out the order in the shell script.

6. the shell script method for safe operation based on the sandbox technology as claimed in claim 5 is characterized in that, controlled order is general shell-command and application-specific order; Uncontrollable order is the order that does not have security strategy; Self-defined permission realizes the authority setting by calling specific program.

7. as claim 5 or 6 described shell script method for safe operation, it is characterized in that the quantity of sandbox is one or more based on the sandbox technology.

8. as claim 5 or 6 described shell script method for safe operation based on the sandbox technology, it is characterized in that security strategy comprises the security strategy of shell-command, the security strategy of application program, the security strategy of resource access, the security strategy of owner's authority and the security strategy of user right.

Images