CN114443210A - Simulation method and device for Linux system partition image file - Google Patents

Abstract

The application provides a method and device for simulating a Linux system partition image file, the method includes: obtaining a first image file of a target partition of the Linux system; the target partition is a partition other than the boot partition of the Linux system; based on The system information of the Linux system, the partition table type is obtained, the boot information matching the system information of the Linux system is confirmed, and the target file is generated according to the boot information and the first image file; based on the target file to emulate the Linux system containing the target partition. The method and device for simulating a Linux system partition image file provided by this application are used to solve the problem that the Linux system partition image file cannot be simulated, improve the computer simulation forensics technology, and adapt to more computer simulation simulation forensics scenarios.

Description

Simulation method and device for Linux system partition image file

technical field

The present application relates to the field of computer system simulation, and in particular, to a method and device for simulating a partition image file of a Linux system.

Background technique

In the field of computer system simulation, computer forensics can be accomplished by simulating the system. In order to obtain forensics on the computer installed with the Linux system, a system image of the hard disk installed with the Linux system can be obtained. After that, load the system image through the virtual machine, and run the Linux system of the forensic computer in the simulation environment.

However, in some special cases, the forensics personnel only extracted the partition image of part of the Linux partition. Since the system partition of the Linux system does not contain boot information, when collecting forensics for the Linux system, the obtained partition of the Linux system The image cannot be simulated directly, so it is impossible to collect and analyze the evidence dynamically and intuitively on the forensic computer.

SUMMARY OF THE INVENTION

The purpose of this application is to provide a simulation method and device for a Linux system partition image file, which are used to solve the problem that the Linux system partition image file cannot be simulated, improve the computer simulation forensics technology, and adapt to more computer simulation simulation forensics scenarios.

The application provides a simulation method for a Linux system partition image file, including:

Obtain the first image file of the target partition of the Linux system; the target partition is the partition outside the boot partition of the Linux system; Based on the system information of the Linux system, determine the system information that matches the Linux system. boot information, and generate a target file according to the boot information and the first image file; based on the target file, simulate the Linux system including the target partition.

Optionally, the obtaining the first image file of the target partition of the Linux system includes: determining the target partition from the partition of the Linux system; extracting data contained in the target partition, and generating the target partition of the target partition. The first image file.

Optionally, determining the boot information that matches the system information of the Linux system based on the system information of the Linux system includes: parsing the file system of the first image file to obtain the system information; For the system information, the bootstrap information corresponding to the system information is determined from a preset bootstrap information library; wherein, the bootstrap information is used to start the Linux system corresponding to the system information.

Optionally, the generating a target file according to the guide information and the first image file includes: acquiring a second image file including the guide information; combining the first image file with the second image The files are spliced to obtain the target file.

Optionally, the target file is a virtual disk file; and the simulation of the Linux system including the target partition based on the target file includes: creating a virtual machine matching the system information, The virtual disk file is loaded into the virtual machine, and the Linux system is run in a simulated environment.

The application also provides a simulation device for a Linux system partition image file, including:

The acquisition module is used to obtain the first image file of the target subregion of the Linux system; the target subregion is the subregion other than the boot subregion of the Linux system; the generation module is used to determine and match the system information based on the Linux system. The boot information matched with the system information of the Linux system, and generate a target file according to the boot information and the first image file; an emulation module is used for, based on the target file, for the Linux containing the target partition The system is simulated.

Optionally, the apparatus further includes: a determining module; the determining module is used to determine a target partition from the partitions of the Linux system; the generating module is specifically configured to extract the data contained in the target partition, and generating the first image file of the target partition.

Optionally, the apparatus further includes: a parsing module; the parsing module is configured to parse the file system of the first image file to obtain the system information; the determining module is further configured to based on the system information , and determine the bootstrap information corresponding to the system information from the preset bootstrap information database; wherein, the bootstrap information is used for starting the Linux system corresponding to the system information.

Optionally, the obtaining module is further configured to obtain a second image file containing the guiding information; the generating module is specifically configured to splicing the first image file and the second image file to obtain the target file.

Optionally, the target file is a virtual disk file; the simulation module is specifically configured to create a virtual machine that matches the system information, and load the virtual disk file into the virtual machine, and simulate The Linux system is run in the environment.

The present application also provides a computer program product, including a computer program/instruction, when the computer program/instruction is executed by a processor, the steps of the method for simulating a Linux system partition image file as described above are implemented.

The present application also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and running on the processor, the processor implementing the Linux system partition as described above when the processor executes the program The steps of the simulation method of the image file.

The present application also provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, implements the steps of any of the above-mentioned methods for simulating a Linux system partition image file.

The method and device for simulating a Linux system partition image file provided by the present application, after obtaining the first image file of the target partition of the Linux system, since the first image file does not contain boot information, the corresponding boot information needs to be The first image file is implanted. Specifically, based on the system information of the Linux system, boot information matching the system information of the Linux system may be determined, and a target file may be generated according to the boot information and the first image file. Finally, based on the target file, the Linux system including the target partition is simulated to achieve the purpose of forensics of the Linux system.

Description of drawings

In order to illustrate the technical solutions in the present application or the prior art more clearly, the following briefly introduces the accompanying drawings that are needed in the description of the embodiments or the prior art. Obviously, the drawings in the following description are of the present application. For some embodiments of the present invention, for those of ordinary skill in the art, other drawings can also be obtained from these drawings without any creative effort.

Fig. 1 is one of the schematic flow sheets of the simulation method of the Linux system partition mirror file provided by the application;

Fig. 2 is the second schematic flow chart of the simulation method of the Linux system partition image file provided by the application;

Fig. 3 is the structural representation of the emulation device of the Linux system partition mirror file provided by the application;

FIG. 4 is a schematic structural diagram of an electronic device provided by the present application.

Detailed ways

In order to make the purpose, technical solutions and advantages of the present application clearer, the technical solutions in the present application will be described clearly and completely below with reference to the accompanying drawings in the present application. Obviously, the described embodiments are part of the embodiments of the present application. , not all examples. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present application.

The terms "first", "second" and the like in the description and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It is to be understood that the data so used are interchangeable under appropriate circumstances so that the embodiments of the present application can be practiced in sequences other than those illustrated or described herein, and distinguish between "first", "second", etc. The objects are usually of one type, and the number of objects is not limited. For example, the first object may be one or more than one. In addition, "and/or" in the description and claims indicates at least one of the connected objects, and the character "/" generally indicates that the associated objects are in an "or" relationship.

Computer simulation forensics refers to the process of generating virtual machine configuration files from computer storage image files obtained by forensics, and running them in a virtualized system to simulate the operating environment of the original computer system. In order to simulate the forensics of the computer to be forensics, it is necessary to obtain the image file of the computer's system, and then run the system of the forensic computer in a simulated environment through the image file, and complete the forensics of the forensic computer.

Linux disk partitions are mainly divided into two types: primary partitions and extension partitions. The sum of the number of basic partitions and extended partitions cannot be greater than four. And the basic partition can be used immediately but cannot be re-partitioned. The extended partition must be partitioned before it can be used, that is to say, it must be partitioned twice. In Linux, every hardware device is mapped to a system file, and it is no exception for IDE or SCSI devices such as hard disks and CD-ROMs.

The following describes the startup process of the Linux system involved in the simulation process: When the computer with the Linux system is turned on, the first is the Basic Input Output System (BIOS) power-on self-check, and the boot device set in the BIOS is followed by the boot device. (usually the hard disk) to boot. After that, read the bootloader bootloader to guide the startup of the Linux system.

Based on the above startup process of the Linux system, in order to start the Linux system, it is necessary to obtain the boot information in the Master Boot Record (MBR) partition or the GUID Partition Table (GPT) partition. The boot information is stored in the first sector of the hard disk. When the hard disk is damaged, usually only part of the system partition image of the Linux system can be obtained.

However, since the system partition of the Linux system has no boot information, if the complete image file of the Linux system is not obtained (for reasons such as hard disk damage) during the forensics of the Linux system, but only the image file of a part of the partition is obtained, the image file of the partition cannot be obtained. The obtained image file is simulated, so it is impossible to collect and analyze the evidence dynamically and intuitively on the computer being forensic.

In view of the above-mentioned problems existing in the related art, the embodiment of the present application proposes a method for simulating forensics of a partition image file of a Linux system. When simulating a partition image that does not contain boot information, the The way of implanting the boot information into the partition image realizes the simulation of the Linux system, and then completes the forensics of the Linux system.

The method for simulating a Linux system partition image file provided by the embodiment of the present application will be described in detail below with reference to the accompanying drawings through specific embodiments and application scenarios thereof.

As shown in FIG. 1 , a method for simulating a Linux system partition image file provided by an embodiment of the present application may include the following steps 101 to 103:

Step 101: Obtain the first image file of the target partition of the Linux system.

The target partition is a partition other than the boot partition of the Linux system.

Exemplarily, the above-mentioned boot partition may be the first physical sector of the MBR partition or the GPT partition. Taking the MBR partition method as an example, the size of a sector of the hard disk is 512 bytes, and the master boot record consists of three parts: the first 446 bytes (offset 0~1BDH) occupied by the boot program, and the subsequent 64 bytes ( The offset 1BEH-1FDH) is the hard disk partition table (DiskPartition Table, DPT), and the last two bytes "55AA" (offset 1FEH-1FFH) are the end marks.

It should be noted that if the hard disk on which the Linux system is installed is not damaged during the forensics process, and all the information in the hard disk can be extracted, the obtained Linux system image includes boot information and can be simulated directly.

However, what the embodiments of the present application need to solve is that in the forensics process, when the hard disk on which the Linux system is installed is damaged, only the image files of part of the system partition of the Linux system can be extracted. It does not contain the necessary boot information when the Linux system is started. Therefore, the obtained image file of the system partition of the Linux system cannot be directly used for the simulation of the Linux system.

Exemplarily, the above-mentioned Linux system is the Linux system installed in the forensic computer. The above target partition may be other partitions except the boot partition in the Linux system.

Step 102: Based on the system information of the Linux system, determine boot information that matches the system information of the Linux system, and generate a target file according to the boot information and the first image file.

Exemplarily, the system information of the above-mentioned Linux system may include at least one of the following: system type, version number.

Exemplarily, according to the system information of the Linux system installed on the forensic computer, boot information matching the system information of the Linux system can be found from a preset boot information base.

Specifically, the above step 102 may include the following steps 102a1 and 102a2:

Step 102a1: Determine the target partition from the partitions of the Linux system.

Step 102a2: Extract the data contained in the target partition, and generate the first image file of the target partition.

Exemplarily, in a Linux system, data in the target partition of the Linux system can be extracted through a data description (Data Description, DD) command. The DD command is mainly used to convert and copy files in Linux system.

Exemplarily, after the data in the target partition is extracted, the first mirror file may be generated using the extracted data. The first image file may be a DD image file. DD mirroring has the advantage of strong compatibility. Currently, all disk mirroring and analysis tools support DD mirroring. Moreover, since the DD image is in an uncompressed format, there is no need to decompress it during the loading process. Therefore, the DD image also has the advantage of high speed.

Exemplarily, after obtaining the DD image of the target partition, it is necessary to further obtain boot information that matches the system information of the Linux system installed on the forensic computer.

Specifically, the above step 102 may include the following steps 102b1 and 102b2:

Step 102b1: Parse the file system of the first image file to obtain the system information.

Step 102b2: Based on the system information, determine boot information corresponding to the system information from a preset boot information library.

The boot information is used for starting the Linux system corresponding to the system information.

Exemplarily, with reference to FIG. 2 , the above process of obtaining the boot information of the Linux system will be described. As shown in Figure 2, after obtaining the partition image file of the above-mentioned target partition (that is, the above-mentioned first image file), due to the lack of the system information of the above-mentioned Linux system, the file system of the above-mentioned first image file needs to be parsed, And get the system information and partition table type (including MBR partition or GPT partition) of the above Linux system. Afterwards, the bootstrap information corresponding to the parsed system information is acquired from the preset bootstrap information base.

The above-mentioned preset guidance information base may include guidance information of various Linux distributions. After the above-mentioned system information is obtained, the corresponding guidance information can be matched from the above-mentioned preset guidance information base according to the system information, and then the information based on the guidance can be obtained. information to create the generated boot image. It should be noted that the boot image may be pre-generated and stored in the aforementioned preset information library, or may be created based on the boot information after obtaining boot information matching the aforementioned system information.

Exemplarily, after determining the bootstrap information required for running the Linux system, the bootstrap information needs to be implanted into the first image file.

Specifically, the above step 102 may include the following steps 102c1 and 102c2:

Step 102c1: Obtain a second image file containing the bootstrap information.

Step 102c2, splicing the first image file and the second image file to obtain the target file.

Exemplarily, the above-mentioned second image file is an image file made based on the above-mentioned boot information, and the second image file includes the boot information required for starting the Linux system. The second image file may also be a DD image. The above-mentioned target file is a file that can be directly loaded by the virtual machine. After the virtual machine loads the target file, the above-mentioned Linux system can be run in the simulation environment.

In a possible implementation manner, the above-mentioned target file may be a virtual disk (VMWare VirtualMachine Disk Format, VMDK) file, in order to generate the virtual disk file, an application programming interface (Application Programming Interface, API) of VMWare can be called, and the above The first image file and the second image file are spliced to generate a virtual disk file.

Exemplarily, with reference to FIG. 2 , the process of obtaining the above target file will be described. After the boot information matching the system information is obtained from the preset boot information library, the boot image file corresponding to the guide information (ie, the second image file) can be further obtained. Afterwards, the partition image file (that is, the above-mentioned first image file) is spliced with the boot image file to generate a virtual disk file (that is, the above-mentioned target file), and the virtual disk file can be loaded in a virtual machine to simulate the above-mentioned Linux system.

It should be noted that the partition image file may be a DD image file, such as CentOS x64-2-s001.dd; the boot image file may be a DD image file, such as CentOS x64-2-s002.dd.

Step 103: Based on the target file, simulate the Linux system including the target partition.

Exemplarily, after the above-mentioned target file is obtained, the simulation of the Linux system installed on the above-mentioned forensic computer can be realized based on the above-mentioned target file.

Exemplarily, the above-mentioned target file may be a virtual disk file, and the above-mentioned step 103 may include the following step 103a:

Step 103a: Create a virtual machine matching the system information, load the virtual disk file into the virtual machine, and run the Linux system in a simulation environment.

Exemplarily, before loading the virtual disk file, a virtual machine corresponding to the system version of the Linux system installed on the forensic computer needs to be created. After that, the above virtual disk file can be loaded in the virtual machine.

Exemplarily, after the virtual disk file is loaded in the virtual machine, the virtual machine is started, and the Linux system is run in the simulation environment of the virtual machine.

It is understandable that, since only the data of the target partition of the Linux system is extracted during the forensics process, the Linux system running in the virtual machine only contains the data of the target partition.

In the method for simulating a Linux system partition image file provided by the embodiment of the present application, after the first image file of the target partition of the Linux system is obtained, since the first image file does not contain boot information, the corresponding boot information needs to be The first image file is implanted. Specifically, based on the system information of the Linux system, boot information matching the system information of the Linux system may be determined, and a target file may be generated according to the boot information and the first image file. Finally, based on the target file, the Linux system including the target partition is simulated to achieve the purpose of forensics of the Linux system.

It should be noted that, in the simulation method of the Linux system partition mirror file provided by the embodiment of the present application, the execution subject can be a simulation device of the Linux system partition mirror file, or a simulation device for executing the Linux system in the simulation device of the Linux system partition mirror file. A control module for the simulation method of partition image files. In the embodiments of the present application, the emulation device for the Linux system partition mirror file provided by the embodiments of the present application is described by taking the simulation method for executing the Linux system partition mirror file by the simulation device of the Linux system partition mirror file as an example.

It should be noted that, in the embodiments of the present application, the above methods are shown in the accompanying drawings. The methods for simulating a Linux system partition image file are all exemplarily described with reference to a figure in the embodiments of the present application. During specific implementation, the method for simulating a Linux system partition image file shown in the drawings of each of the above methods can also be implemented in combination with any other drawings shown in the above embodiments that can be combined, which will not be repeated here.

The following describes the simulation device for the Linux system partition mirror file provided by the present application, and the following description and the above-described simulation method for the Linux system partition mirror file can be referred to each other correspondingly.

3 is a schematic diagram of a structure meeting of an emulation device for a Linux system partition image file provided by an embodiment of the application, as shown in FIG. 3 , and specifically includes:

The obtaining module 301 is used for obtaining the first image file of the target partition of the Linux system; the target partition is a partition other than the boot partition of the Linux system; the generating module 302 is used for the system information based on the Linux system, Determine the boot information that matches the system information of the Linux system, and generate a target file according to the boot information and the first image file; the simulation module 303 is configured to, based on the target file, generate a target file that contains the target file. Partitioned Linux system for emulation.

Optionally, the apparatus further includes: a determining module; the determining module is used to determine a target partition from the partitions of the Linux system; the generating module 302 is specifically configured to extract the data contained in the target partition, and generate the first image file of the target partition.

Optionally, the apparatus further includes: a parsing module; the parsing module is configured to parse the file system of the first image file to obtain the system information; the determining module is further configured to based on the system information , and determine the bootstrap information corresponding to the system information from the preset bootstrap information database; wherein, the bootstrap information is used for starting the Linux system corresponding to the system information.

Optionally, the obtaining module 301 is further configured to obtain a second image file containing the guidance information; the generating module 302 is specifically configured to splicing the first image file and the second image file to get the target file.

Optionally, the target file is a virtual disk file; the emulation module 303 is specifically configured to create a virtual machine that matches the system information, and load the virtual disk file into the virtual machine, in the The Linux system was run in a simulated environment.

The simulation device for the Linux system partition image file provided by the present application, after obtaining the first image file of the target partition of the Linux system, since the first image file does not contain boot information, the corresponding boot information needs to be implanted the first image file. Specifically, based on the system information of the Linux system, boot information matching the system information of the Linux system may be determined, and a target file may be generated according to the boot information and the first image file. Finally, based on the target file, the Linux system including the target partition is simulated to achieve the purpose of forensics of the Linux system.

FIG. 4 illustrates a schematic diagram of the physical structure of an electronic device. As shown in FIG. 4 , the electronic device may include: a processor (processor) 410, a communication interface (Communications Interface) 420, a memory (memory) 430, and a communication bus 440, The processor 410 , the communication interface 420 , and the memory 430 communicate with each other through the communication bus 440 . The processor 410 can call the logic instruction in the memory 430 to execute the simulation method of the Linux system partition image file, the method includes: obtaining the first image file of the target partition of the Linux system; the target partition is the boot of the Linux system. A partition other than the partition; based on the system information of the Linux system, determine boot information that matches the system information of the Linux system, and generate a target file according to the boot information and the first image file; The target file is used to simulate the Linux system including the target partition.

In addition, the above-mentioned logic instructions in the memory 430 can be implemented in the form of software functional units and can be stored in a computer-readable storage medium when sold or used as an independent product. Based on this understanding, the technical solution of the present application can be embodied in the form of a software product in essence, or the part that contributes to the prior art or the part of the technical solution. The computer software product is stored in a storage medium, including Several instructions are used to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, Read-Only Memory (ROM, Read-Only Memory), Random Access Memory (RAM, Random Access Memory), magnetic disk or optical disk and other media that can store program codes .

On the other hand, the present application also provides a computer program product, the computer program product includes a computer program stored on a computer-readable storage medium, the computer program includes program instructions, and when the program instructions are executed by a computer, The computer can execute the simulation method of the Linux system partition mirror file provided by the above methods, the method includes: obtaining the first mirror file of the target partition of the Linux system; the target partition is a partition other than the boot partition of the Linux system ; Based on the system information of the Linux system, determine the guide information that matches the system information of the Linux system, and generate a target file according to the guide information and the first image file; Based on the target file, to The Linux system containing the target partition is simulated.

In another aspect, the present application also provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by the processor, the computer program is implemented to execute the above-mentioned simulation methods for the Linux system partition image file provided, the method comprising: : obtain the first image file of the target partition of the Linux system; the target partition is a partition other than the boot partition of the Linux system; based on the system information of the Linux system, determine to match the system information of the Linux system and generate a target file according to the boot information and the first image file; based on the target file, simulate the Linux system including the target partition.

The device embodiments described above are only illustrative, wherein the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in One place, or it can be distributed over multiple network elements. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution in this embodiment. Those of ordinary skill in the art can understand and implement it without creative effort.

From the description of the above embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus a necessary general hardware platform, and certainly can also be implemented by hardware. Based on this understanding, the above-mentioned technical solutions can be embodied in the form of software products in essence or the parts that make contributions to the prior art, and the computer software products can be stored in computer-readable storage media, such as ROM/RAM, magnetic A disc, an optical disc, etc., includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform the methods described in various embodiments or some parts of the embodiments.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still be The technical solutions described in the foregoing embodiments are modified, or some technical features thereof are equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions in the embodiments of the present application.

Claims (11)

1. a simulation method of a Linux system partition image file, is characterized in that, comprises: Obtain the first image file of the target partition of the Linux system; the target partition is the partition outside the boot partition of the Linux system; Based on the system information of the Linux system, determine boot information that matches the system information of the Linux system, and generate a target file according to the boot information and the first image file; Based on the target file, the Linux system including the target partition is simulated. 2. method according to claim 1, is characterized in that, described obtaining the first mirror file of the target partition of Linux system, comprising: Determine the target partition from the partition of the Linux system; Extracting data contained in the target partition, and generating the first image file of the target partition. 3. method according to claim 1, is characterized in that, described based on the system information of described Linux system, determine the boot information that matches with the system information of described Linux system, comprising: Parsing the file system of the first image file to obtain the system information; Based on the system information, determining the guidance information corresponding to the system information from a preset guidance information library; The boot information is used for starting the Linux system corresponding to the system information. 4. The method according to claim 1, wherein the generating an object file according to the guide information and the first image file comprises: obtaining a second image file containing the bootstrap information; The target file is obtained by splicing the first image file and the second image file. 5. The method according to claim 1, wherein the target file is a virtual disk file; Described based on the target file, the Linux system including the target partition is simulated, including: Create a virtual machine matching the system information, load the virtual disk file into the virtual machine, and run the Linux system in a simulated environment. 6. the emulation device of a Linux system partition image file, is characterized in that, described device comprises: an acquisition module for acquiring the first image file of the target subregion of the Linux system; the target subregion is the subregion outside the boot subregion of the Linux system; Generating module, for based on the system information of the Linux system, to determine the guide information that matches the system information of the Linux system, and according to the guide information and the first image file, generate a target file; The simulation module is used to simulate the Linux system including the target partition based on the target file. 7. The apparatus according to claim 6, wherein the apparatus further comprises: a determination module; The determining module is used to determine the target partition from the partition of the Linux system; The generating module is specifically configured to extract the data contained in the target partition and generate the first image file of the target partition. 8. The apparatus according to claim 6, wherein the apparatus further comprises: a parsing module and a determining module; the parsing module, configured to parse the file system of the first image file to obtain the system information; The determining module is further configured to determine, based on the system information, bootstrap information corresponding to the system information from a preset bootstrap information library; The boot information is used for starting the Linux system corresponding to the system information. 9. a computer-readable storage medium, having a computer program stored thereon, is characterized in that, when the computer program is executed by the processor, the simulation of the Linux system partition image file as described in any one of claims 1 to 5 is realized steps of the method. 10. A computer program product, comprising computer program/instruction, is characterized in that, when this computer program/instruction is executed by processor, realizes the step of the simulation method of the described Linux system partition mirror file in claim 1 to 5 any one . 11. An electronic device comprising a memory, a processor and a computer program stored on the memory and running on the processor, the processor implementing the Linux described in any one of claims 1 to 5 when the processor executes the program The steps of the emulation method of the system partition image file.

Images