CN106886712B - Method and device for installing program - Google Patents
Method and device for installing program Download PDFInfo
- Publication number
- CN106886712B CN106886712B CN201510944312.2A CN201510944312A CN106886712B CN 106886712 B CN106886712 B CN 106886712B CN 201510944312 A CN201510944312 A CN 201510944312A CN 106886712 B CN106886712 B CN 106886712B
- Authority
- CN
- China
- Prior art keywords
- authority
- program
- folder
- dynamic library
- installing
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 158
- 238000009434 installation Methods 0.000 claims abstract description 103
- 238000012217 deletion Methods 0.000 claims description 4
- 230000037430 deletion Effects 0.000 claims description 4
- 238000004519 manufacturing process Methods 0.000 claims description 4
- 238000000605 extraction Methods 0.000 claims description 3
- 238000012545 processing Methods 0.000 description 9
- 238000004891 communication Methods 0.000 description 7
- 230000006870 function Effects 0.000 description 7
- 238000010586 diagram Methods 0.000 description 5
- 230000015654 memory Effects 0.000 description 5
- 238000004590 computer program Methods 0.000 description 4
- 238000001514 detection method Methods 0.000 description 4
- 238000011900 installation process Methods 0.000 description 3
- 230000001413 cellular effect Effects 0.000 description 2
- 238000005034 decoration Methods 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 230000003287 optical effect Effects 0.000 description 2
- 241001634817 Cydia Species 0.000 description 1
- 239000000284 extract Substances 0.000 description 1
- 238000010295 mobile communication Methods 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/51—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/03—Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
- G06F2221/033—Test or assess software
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Storage Device Security (AREA)
- Stored Programmes (AREA)
Abstract
The invention provides a method for installing a program, which comprises the following steps: judging whether the program to be installed belongs to a high-authority type; when the program is judged to belong to the high authority type, judging whether the authority of the dynamic library calling folder is a read-write authority; when the authority of the dynamic library calling folder is judged to be the read-write authority, writing an installation service file for installing a program with a high authority type into the dynamic library calling folder; and restarting a positioning service process for positioning to assist in installing the program through the installation service file.
Description
Technical Field
The invention relates to the technical field of wireless mobile communication, in particular to a method and a device for installing a program.
Background
The main reason for the increasing user choice of terminal devices based on the iOS operating system is the higher security of the iOS operating system. However, the security and reliability of the iOS operating system mainly depends on strict authority limits for the application, which causes the user to have to cross prison to acquire high authority when installing the high authority application. The operation difficulty of a user is greatly increased in the process of crossing the prison, and the original high safety and reliability are lost through the iOS operation system of the cross prison.
Meanwhile, even after the iOS operating system is subjected to complex jail-breaking operation, if an application program requiring high authority is installed in the iOS operating system of the intelligent mobile terminal, a user needs to perform complex application program package installation and debugging operation. For example, a user needs to install a DEB application package through Cydia, the DEB application package is an application package applied to an operating system such as Debian and Ubuntu, and installation of the DEB application package is not recommended under a non-Debian and Ubuntu operating system: the installation process is complicated because the DEB application package installation environment dependency problem needs to be solved.
Therefore, how to install a high-permission application program in the iOS operating system without going through prison and help a user to avoid executing a complicated installation and debugging process is an urgent problem to be solved.
Disclosure of Invention
In order to overcome the above technical problems or at least partially solve the above technical problems, the following technical solutions are proposed:
one embodiment of the present invention provides a method of installing a program, the method comprising:
judging whether the program to be installed belongs to a high-authority type;
when the program is judged to belong to the high authority type, judging whether the authority of the dynamic library calling folder is a read-write authority;
when the authority of the dynamic library calling folder is judged to be the read-write authority, writing an installation service file for installing a program with a high authority type into the dynamic library calling folder;
and restarting a positioning service process for positioning to assist in installing the program through the installation service file.
Preferably, the determining whether the program to be installed belongs to the high-permission type specifically includes:
extracting identification information of a program to be installed;
and performing matching query in a preset installation authority corresponding list based on the identification information to determine the authority type of the program and judge whether the authority type is a high authority type.
Optionally, the method further comprises:
and when the authority of the dynamic library calling folder is judged not to be the read-write authority, the authority of the dynamic library calling folder is adjusted to be the read-write authority based on a preset authority adjusting mode.
Preferably, the method for adjusting the authority of the dynamic library calling folder into the read-write authority based on a predetermined authority adjustment mode specifically includes:
executing deletion operation on the configuration file related to the positioning service process in the system;
associating the configuration file to the dynamic library invocation folder;
and restarting the positioning service process, and adjusting the authority of the dynamic library calling folder into the read-write authority.
Preferably, restarting the location service process for location to assist in installing the program through the installation service file specifically includes:
restarting a positioning service process for positioning, and running the installation service file in the positioning service process;
installing the program through the installation service file.
Preferably, the restarting the location service process for positioning includes:
the restart method in the management of the positioning service process based on the system restarts the positioning service process used for positioning.
Preferably, the program of the high privilege type has a privilege higher than that granted to the application program by the system.
Another embodiment of the present invention provides an apparatus for installing a program, including:
the type judging module is used for judging whether the program to be installed belongs to a high-authority type;
the authority judging module is used for judging whether the authority of the dynamic library calling folder is the read-write authority or not when the program is judged to belong to the high authority type;
the folder writing module is used for writing an installation service file for installing a program with a high authority type into the dynamic library calling folder when the authority of the dynamic library calling folder is judged to be the read-write authority;
and the process restarting module is used for restarting the positioning service process for positioning so as to assist in installing the program through the installation service file.
Preferably, the type determining module specifically includes:
an identification information extraction unit for extracting identification information of a program to be installed;
the type determining unit is used for carrying out matching query in a preset installation authority corresponding list based on the identification information so as to determine the authority type of the program;
and the type judging unit is used for judging whether the authority type is a high authority type.
Optionally, the apparatus further comprises:
and the authority adjusting module is used for adjusting the authority of the dynamic library calling folder into the read-write authority based on a preset authority adjusting mode when the authority of the dynamic library calling folder is judged not to be the read-write authority.
Preferably, the permission adjustment module specifically includes:
the file deleting unit is used for deleting the configuration file related to the positioning service process in the system;
the file association unit is used for associating the configuration file to the dynamic library calling folder;
and the first restarting unit is used for restarting the positioning service process and adjusting the authority of the dynamic library calling folder into a reading and writing authority.
Preferably, the process restart module specifically includes:
the second restarting unit is used for restarting the positioning service process for positioning;
the file operation unit is used for operating the installation service file in the positioning service process;
a program installation unit for installing the program through the installation service file.
Preferably, the first restarting unit or the second restarting unit is specifically configured to restart the location service process used for location based on a restarting method in the management of the location service process of the system.
Preferably, the program of the high privilege type has a privilege higher than that granted to the application program by the system.
The technical scheme of the invention solves the problems of how to install the high-authority application program in the iOS operating system without going through prison and help the user to avoid executing the complicated installation and debugging process. Firstly, judging whether a program to be installed belongs to a high-authority type, and executing subsequent installation operation only if the program to be installed meets the condition of belonging to the high-authority type program, but not all high-authority application programs can execute the installation operation without selection, so that safe and reliable high-authority application programs are screened out, the installation of malicious application programs is avoided, and the high safety and reliability of the system are guaranteed; then, when the program is judged to belong to the high-authority type, judging whether the authority of the dynamic library calling folder is a read-write authority, and only when the authority of the dynamic library calling folder is the read-write authority, writing an installation service file into the dynamic library calling folder; then, when the authority of the dynamic library calling folder is judged to be the read-write authority, writing an installation service file for installing a program with a high authority type into the dynamic library calling folder, wherein the installation service file is used for assisting in installing an application program which needs high authority; and finally, restarting the positioning service process for positioning to assist in installing the service file installation program, restarting the positioning service process for positioning to enable the installation service file to be automatically loaded into the dynamic library calling folder, and realizing the automatic installation function of the application program requiring high authority. In the implementation process of the invention, the positioning service process for positioning is automatically restarted, and the service file is automatically loaded and installed, so that the manual setting and debugging process of a user is not needed, and the operation difficulty of installing the high-authority application program by the user is greatly reduced. The method and the system realize the rapid and convenient installation of the high-authority application program without prison crossing, and simultaneously can ensure that the high safety and reliability of the iOS system are not influenced. Additional aspects and advantages of the invention will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention.
Drawings
The foregoing and/or additional aspects and advantages of the present invention will become apparent and readily appreciated from the following description of the embodiments, taken in conjunction with the accompanying drawings of which:
FIG. 1 is a flow chart illustrating a method of installing a program according to an embodiment of the present invention;
FIG. 2 is a flow chart illustrating a method of installing a program in accordance with a preferred embodiment of the present invention;
fig. 3 is a schematic structural diagram of a program installation device according to another embodiment of the present invention.
Detailed Description
Reference will now be made in detail to embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like or similar reference numerals refer to the same or similar elements or elements having the same or similar function throughout. The embodiments described below with reference to the drawings are illustrative only and should not be construed as limiting the invention.
As used herein, the singular forms "a", "an", "the" and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms "comprises" and/or "comprising," when used in this specification, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof. It will be understood that when an element is referred to as being "connected" or "coupled" to another element, it can be directly connected or coupled to the other element or intervening elements may also be present. Further, "connected" or "coupled" as used herein may include wirelessly connected or wirelessly coupled. As used herein, the term "and/or" includes all or any element and all combinations of one or more of the associated listed items.
It will be understood by those skilled in the art that, unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. It will be further understood that terms, such as those defined in commonly used dictionaries, should be interpreted as having a meaning that is consistent with their meaning in the context of the prior art and will not be interpreted in an idealized or overly formal sense unless expressly so defined herein.
As will be appreciated by those skilled in the art, a "terminal" as used herein includes both devices having a wireless signal receiver, which are devices having only a wireless signal receiver without transmit capability, and devices having receive and transmit hardware, which have devices having receive and transmit hardware capable of two-way communication over a two-way communication link. Such a device may include: a cellular or other communication device having a single line display or a multi-line display or a cellular or other communication device without a multi-line display; PCS (Personal Communications Service), which may combine voice, data processing, facsimile and/or data communication capabilities; a PDA (Personal Digital Assistant), which may include a radio frequency receiver, a pager, internet/intranet access, a web browser, a notepad, a calendar and/or a GPS (Global Positioning System) receiver; a conventional laptop and/or palmtop computer or other device having and/or including a radio frequency receiver. As used herein, a "terminal" or "terminal device" may be portable, transportable, installed in a vehicle (aeronautical, maritime, and/or land-based), or situated and/or configured to operate locally and/or in a distributed fashion at any other location(s) on earth and/or in space. As used herein, a "terminal Device" may also be a communication terminal, a web terminal, a music/video playing terminal, such as a PDA, an MID (Mobile Internet Device) and/or a Mobile phone with music/video playing function, or a smart tv, a set-top box, etc.
Fig. 1 is a flowchart illustrating a method for installing a program according to an embodiment of the present invention.
Step S110: judging whether the program to be installed belongs to a high-authority type; step S120: when the program is judged to belong to the high-authority type, judging whether the authority of the dynamic library calling folder is the read-write authority; step S130: when the authority of the dynamic library calling folder is judged to be the read-write authority, writing an installation service file for installing a program with a high authority type into the dynamic library calling folder; step S140: and restarting the positioning service process for positioning to assist in installing the program through the installation service file.
Step S110: and judging whether the program to be installed belongs to a high-authority type.
It should be noted that, because it is necessary to ensure the security and reliability of the iOS operating system, the security and reliability of the program to be installed are detected, and a program with high security and reliability is screened out. By the method, the malicious application program with high authority is prevented from being installed in the iOS operating system by mistake, and therefore security threats to privacy, finance and the like of users are avoided.
Preferably, as shown in fig. 2, the step of determining whether the program to be installed belongs to the high-privilege type specifically includes steps S211 and S212: step S211: extracting identification information of a program to be installed; step S212: and performing matching query in a preset installation authority corresponding list based on the identification information to determine the authority type of the program and judge whether the authority type is a high authority type.
It should be noted that, the predetermined installation authority correspondence list records relevant information corresponding to the program, such as identification information of the program and a corresponding authority type.
For example, the user M installs an application program "XX security guard" for identifying and intercepting spam messages in an iOS operating system of the intelligent terminal, and the application program needs to be run in a high-authority related service process in the iOS operating system to call a high-authority service and operate related files based on the high-authority; when the application program is installed, firstly extracting the identification information of the application program; and then, performing matching query in an installation authority corresponding list stored in the iOS operating system to determine the authority type corresponding to the application program, wherein the corresponding authority type is a high authority type.
For example, when an application program such as a video type, an instant messaging type and the like passes safety and reliability detection of the program in advance, identification information corresponding to the application program can be recorded in an installation authority corresponding column, and a corresponding authority type is identified to be a middle authority type; if the safety checking and killing type application program passes the safety and reliability detection of the program in advance, the identification information corresponding to the application program can be recorded in the installation authority corresponding column, and the corresponding authority type is identified to be the high authority type, the identification information corresponding to the XX safety guard of the application program is matched with the relevant information in the installation authority corresponding list, and therefore the XX safety guard of the application program is judged.
Step S120: and when the program is judged to belong to the high-authority type, judging whether the authority of the dynamic library calling folder is the read-write authority.
The dynamic library calling folder is used for calling the dynamic library, and the dynamic library can be automatically mounted in a certain program after being called by the dynamic library calling folder and subjected to subsequent processing. For example, in the iOS operating system of the iPhone smart mobile terminal, the dynamic library call folder is: /Library/MobileSubstrate/dynamic libraries.
It should be noted that, performing read-write operation on the dynamic library calling folder requires that there is a read-write permission for the folder, and before writing any data into the dynamic library calling folder, the permission of the dynamic library calling folder needs to be read first, and whether the permission of the folder is the read-write permission is determined. For example, the authority setting of the iOS operating system in the intelligent mobile terminal corresponding to the dynamic Library call folder/Library/mobile subsystem/dynamic libraries is read, and whether the authority setting of the dynamic Library call folder is a read-write authority is judged.
Step S130: and when the authority of the dynamic library calling folder is judged to be the read-write authority, writing an installation service file for installing the program with the high authority type into the dynamic library calling folder.
It should be noted that when the authority of the dynamic library calling folder is the read-write authority, the installation service file for installing the program with the high authority type can be written into the dynamic library calling folder.
For example, an installation service file for installing a program of a high privilege type is an Autoxiliary instrumentation. And when the authority of the dynamic Library calling folder is judged to be the read-write authority, writing the Autoxiliary inventory.
Preferably, the high privilege type program has a privilege that is higher than the privilege that the system grants to the application. In the iOS operating system, if an application program is directly installed without processing, except for the case that the system is out of the prison, the situation that the built-in storage file of the intelligent terminal cannot be processed is encountered in the installation process. After the Application program which is directly installed without processing is installed, a directory corresponding to the Application program is created in a mobile/Application folder of the iOS, all files which are authorized to be processed by the Application program are limited in the directory corresponding to the Application program created in the mobile/Application folder, and other files beyond the directory cannot perform any operation on the files.
Step S140: and restarting the positioning service process for positioning to assist in installing the program through the installation service file.
It should be noted that, in the step S130, the step of writing the installation service file for installing the program of the high authority type into the dynamic library call folder cannot enable the installation service file to automatically run in the location service process for location, that is, the location service process for location cannot automatically search and load the installation service file for installing the program of the high authority type. The installation service file can be validated to run in the location service process for location only by restarting the location service process for location to assist in installing the program by the installation service file.
According to the embodiment of the invention, the installation service file for installing the high-authority type program is mounted in the positioning service process for positioning, so that the installation service file can be utilized to assist in installing the high-authority type program, and the function of quickly and conveniently installing the high-authority application program is realized. The method does not need to make the iOS operating system break the prison, breaks through the limitation of program installation, is simple and convenient to operate, and reduces the difficulty of program installation.
Preferably, step S140 specifically includes step S141 (not shown in the figure) and step S142 (not shown in the figure): step S141: restarting a positioning service process for positioning, and running an installation service file in the positioning service process; step S142: the program is installed by installing the service file.
For example, in the above example, after the location service process for location is restarted, the installation service file Auxiliary installation.
Wherein, restarting the location service process for location comprises: the restart method in the management of the positioning service process based on the system restarts the positioning service process used for positioning. For example, the location service process for location is restarted based on the shutdown daemon method in the CLLocationManager.
Optionally, the method for installing the program further includes step S150 (not shown in the figure): step S150: and when the authority of the dynamic library calling folder is judged not to be the read-write authority, the authority of the dynamic library calling folder is adjusted to be the read-write authority based on a preset authority adjusting mode.
It should be noted that the process of adjusting the authority of the dynamic library calling folder to the read-write authority specifically includes: and actively manufacturing the system vulnerability by deleting the important configuration file in the system, and associating the configuration file to the dynamic library calling folder, so that after the iOS operating system is restarted, the iOS operating system actively adjusts the authority of the dynamic library calling folder into the read-write authority when the vulnerability is repaired.
Preferably, step S150 specifically includes step S151 (not shown in the figure) and step S152 (not shown in the figure): step S151: executing deletion operation on a configuration file related to a positioning service process in the system; step S152: associating the configuration file to a dynamic library call folder; and restarting the positioning service process, and adjusting the authority of the dynamic library calling folder into the read-write authority.
For example, the configuration file related to the location service process is: first, delete operation is executed to the configuration file/var/mobile/Library/preference/com. applet. location. plist related to the location service process in the system, and the system bug is actively manufactured. Subsequently, the location service process related configuration file/var/mobile/Library/Preferences/com. applet. located. plist is associated to dynamic Library call folder/Library/mobile subsystem/dynamic libraries. And finally, restarting the positioning service process for positioning based on a shutdown daemon method in a CLLocationManager of a restarting method in the positioning service process management of the system. In the process of restarting the positioning service process for positioning, the iOS operating system modifies the permission of the/Library/Mobile subsystem/dynamic libraries into read-write permission for repairing the vulnerability manufactured by deleting the configuration file/var/mobile/Library/Preferences/com.
It should be noted that, after the location service process for location is restarted, the iOS operating system automatically adjusts the authority of the dynamic library calling folder to the read-write authority when repairing the bug. According to the embodiment of the invention, the read-write permission of the dynamic library calling folder is modified, so that the installation service file for installing the high-permission application program is written into the dynamic library calling folder, and the installation service file can be operated in the positioning service program after the positioning service process is restarted.
The technical scheme of the invention solves the problems of how to install the high-authority application program in the iOS operating system without going through prison and help the user to avoid executing the complicated installation and debugging process. Firstly, judging whether a program to be installed belongs to a high-authority type, and executing subsequent installation operation only if the program to be installed meets the condition of belonging to the high-authority type program, but not all high-authority application programs can execute the installation operation without selection, so that safe and reliable high-authority application programs are screened out, the installation of malicious application programs is avoided, and the high safety and reliability of the system are guaranteed; then, when the program is judged to belong to the high-authority type, judging whether the authority of the dynamic library calling folder is a read-write authority, and only when the authority of the dynamic library calling folder is the read-write authority, writing an installation service file into the dynamic library calling folder; then, when the authority of the dynamic library calling folder is judged to be the read-write authority, writing an installation service file for installing a program with a high authority type into the dynamic library calling folder, wherein the installation service file is used for assisting in installing an application program which needs high authority; and finally, restarting the positioning service process for positioning to assist in installing the service file installation program, restarting the positioning service process for positioning to enable the installation service file to be automatically loaded into the dynamic library calling folder, and realizing the automatic installation function of the application program requiring high authority. In the implementation process of the invention, the positioning service process for positioning is automatically restarted, and the service file is automatically loaded and installed, so that the manual setting and debugging process of a user is not needed, and the operation difficulty of installing the high-authority application program by the user is greatly reduced. The method and the system realize the rapid and convenient installation of the high-authority application program without prison crossing, and simultaneously can ensure that the high safety and reliability of the iOS system are not influenced.
Fig. 3 is a schematic structural diagram of a device for installing a program according to an embodiment of the present invention.
The type determining module 310 determines whether the program to be installed belongs to a high privilege type; the permission judging module 320 judges whether the permission of the dynamic library calling folder is the read-write permission when judging that the program belongs to the high permission type; when the authority of the dynamic library calling folder is judged to be the read-write authority, the folder writing module 330 writes an installation service file for installing a program with a high authority type into the dynamic library calling folder; the process restart module 340 restarts the location service process for location to assist in installing the program by installing the service file.
The type determining module 310 determines whether the program to be installed belongs to the high privilege type.
It should be noted that, because it is necessary to ensure the security and reliability of the iOS operating system, the security and reliability of the program to be installed are detected, and a program with high security and reliability is screened out. The module avoids the malicious application program with high authority from being installed in the iOS operating system by mistake, thereby avoiding the security threat to the privacy, finance and the like of the user.
Preferably, the type determining module 310 specifically includes an identification information extracting unit (not shown), a type determining unit (not shown), and a type determining unit (not shown): an identification information extraction unit extracts identification information of a program to be installed; the type determining unit carries out matching query in a preset installation permission corresponding list based on the identification information so as to determine the permission type of the program; the type judging unit judges whether the authority type is a high authority type.
It should be noted that, the predetermined installation authority correspondence list records relevant information corresponding to the program, such as identification information of the program and a corresponding authority type.
For example, the user M installs an application program "XX security guard" for identifying and intercepting spam messages in an iOS operating system of the intelligent terminal, and the application program needs to be run in a high-authority related service process in the iOS operating system to call a high-authority service and operate related files based on the high-authority; when the application program is installed, firstly extracting the identification information of the application program; and then, performing matching query in an installation authority corresponding list stored in the iOS operating system to determine the authority type corresponding to the application program, wherein the corresponding authority type is a high authority type.
For example, when an application program such as a video type, an instant messaging type and the like passes safety and reliability detection of the program in advance, identification information corresponding to the application program can be recorded in an installation authority corresponding column, and a corresponding authority type is identified to be a middle authority type; if the safety checking and killing type application program passes the safety and reliability detection of the program in advance, the identification information corresponding to the application program can be recorded in the installation authority corresponding column, and the corresponding authority type is identified to be the high authority type, the identification information corresponding to the XX safety guard of the application program is matched with the relevant information in the installation authority corresponding list, and therefore the XX safety guard of the application program is judged.
The permission judging module 320 judges whether the permission of the dynamic library calling folder is the read-write permission when judging that the program belongs to the high permission type.
The dynamic library calling folder is used for calling the dynamic library, and the dynamic library can be automatically mounted in a certain program after being called by the dynamic library calling folder and subjected to subsequent processing. For example, in the iOS operating system of the iPhone smart mobile terminal, the dynamic library call folder is: /Library/MobileSubstrate/dynamic libraries.
It should be noted that, performing read-write operation on the dynamic library calling folder requires that there is a read-write permission for the folder, and before writing any data into the dynamic library calling folder, the permission of the dynamic library calling folder needs to be read first, and whether the permission of the folder is the read-write permission is determined. For example, the authority setting of the iOS operating system in the intelligent mobile terminal corresponding to the dynamic Library call folder/Library/mobile subsystem/dynamic libraries is read, and whether the authority setting of the dynamic Library call folder is a read-write authority is judged.
The folder writing module 330 writes the installation service file for installing the program with the high authority type into the dynamic library calling folder when determining that the authority of the dynamic library calling folder is the read-write authority.
It should be noted that when the authority of the dynamic library calling folder is the read-write authority, the installation service file for installing the program with the high authority type can be written into the dynamic library calling folder.
For example, an installation service file for installing a program of a high privilege type is an Autoxiliary instrumentation. And when the authority of the dynamic Library calling folder is judged to be the read-write authority, writing the Autoxiliary inventory.
Preferably, the high privilege type program has a privilege that is higher than the privilege that the system grants to the application. In the iOS operating system, if an application program is directly installed without processing, except for the case that the system is out of the prison, the situation that the built-in storage file of the intelligent terminal cannot be processed is encountered in the installation process. After the Application program which is directly installed without processing is installed, a directory corresponding to the Application program is created in a mobile/Application folder of the iOS, all files which are authorized to be processed by the Application program are limited in the directory corresponding to the Application program created in the mobile/Application folder, and other files beyond the directory cannot perform any operation on the files.
The process restart module 340 restarts the location service process for location to assist in installing the program by installing the service file.
It should be noted that the folder writing module 330 cannot make the installation service file automatically run in the location service process for location, that is, the location service process for location cannot automatically search and load the installation service file for installing the program with high authority type. The installation service file can be validated to run in the location service process for location only by restarting the location service process for location to assist in installing the program by the installation service file.
According to the embodiment of the invention, the installation service file for installing the high-authority type program is mounted in the positioning service process for positioning, so that the installation service file can be utilized to assist in installing the high-authority type program, and the function of quickly and conveniently installing the high-authority application program is realized. The method does not need to make the iOS operating system break the prison, breaks through the limitation of program installation, is simple and convenient to operate, and reduces the difficulty of program installation.
Preferably, the process restart module 340 specifically includes a second restart unit (not shown), a file execution unit (not shown), and a program installation unit (not shown): the second restarting unit restarts the positioning service process for positioning; the file operation unit operates the installation service file in the positioning service process; the program installation unit installs the program by installing the service file.
For example, in the above example, after the location service process for location is restarted, the installation service file Auxiliary installation.
The second restarting unit is specifically used for restarting the location service process for location based on a restarting method in the location service process management of the system. For example, the location service process for location is restarted based on the shutdown daemon method in the CLLocationManager.
Optionally, the device of the installer further comprises an authority adjustment module 350 (not shown): the permission adjustment module 350 adjusts the permission of the dynamic library calling folder to the read-write permission based on a predetermined permission adjustment mode when it is determined that the permission of the dynamic library calling folder is not the read-write permission.
It should be noted that, the method for implementing the permission adjustment module 350 specifically includes: and actively manufacturing the system vulnerability by deleting the important configuration file in the system, and associating the configuration file to the dynamic library calling folder, so that after the iOS operating system is restarted, the iOS operating system actively adjusts the authority of the dynamic library calling folder into the read-write authority when the vulnerability is repaired.
Preferably, the permission adjustment module 350 specifically includes a file deletion unit (not shown), a file association unit (not shown), and a first restart unit (not shown): the file deleting unit executes deleting operation on the configuration file related to the positioning service process in the system; the file association unit associates the configuration file with a dynamic library calling folder; and the first restarting unit restarts the positioning service process and adjusts the authority of the dynamic library calling folder into the read-write authority.
For example, the configuration file related to the location service process is: first, delete operation is executed to the configuration file/var/mobile/Library/preference/com. applet. location. plist related to the location service process in the system, and the system bug is actively manufactured. Subsequently, the location service process related configuration file/var/mobile/Library/Preferences/com. applet. located. plist is associated to dynamic Library call folder/Library/mobile subsystem/dynamic libraries. And finally, restarting the positioning service process for positioning based on a shutdown daemon method in a CLLocationManager of a restarting method in the positioning service process management of the system. In the process of restarting the positioning service process for positioning, the iOS operating system modifies the permission of the/Library/Mobile subsystem/dynamic libraries into read-write permission for repairing the vulnerability manufactured by deleting the configuration file/var/mobile/Library/Preferences/com.
It should be noted that, after the location service process for location is restarted, the iOS operating system automatically adjusts the authority of the dynamic library calling folder to the read-write authority when repairing the bug. According to the embodiment of the invention, the read-write permission of the dynamic library calling folder is modified, so that the installation service file for installing the high-permission application program is written into the dynamic library calling folder, and the installation service file can be operated in the positioning service program after the positioning service process is restarted.
The technical scheme of the invention solves the problems of how to install the high-authority application program in the iOS operating system without going through prison and help the user to avoid executing the complicated installation and debugging process. Firstly, judging whether a program to be installed belongs to a high-authority type, and executing subsequent installation operation only if the program to be installed meets the condition of belonging to the high-authority type program, but not all high-authority application programs can execute the installation operation without selection, so that safe and reliable high-authority application programs are screened out, the installation of malicious application programs is avoided, and the high safety and reliability of the system are guaranteed; then, when the program is judged to belong to the high-authority type, judging whether the authority of the dynamic library calling folder is a read-write authority, and only when the authority of the dynamic library calling folder is the read-write authority, writing an installation service file into the dynamic library calling folder; then, when the authority of the dynamic library calling folder is judged to be the read-write authority, writing an installation service file for installing a program with a high authority type into the dynamic library calling folder, wherein the installation service file is used for assisting in installing an application program which needs high authority; and finally, restarting the positioning service process for positioning to assist in installing the service file installation program, restarting the positioning service process for positioning to enable the installation service file to be automatically loaded into the dynamic library calling folder, and realizing the automatic installation function of the application program requiring high authority. In the implementation process of the invention, the positioning service process for positioning is automatically restarted, and the service file is automatically loaded and installed, so that the manual setting and debugging process of a user is not needed, and the operation difficulty of installing the high-authority application program by the user is greatly reduced. The method and the system realize the rapid and convenient installation of the high-authority application program without prison crossing, and simultaneously can ensure that the high safety and reliability of the iOS system are not influenced.
Those skilled in the art will appreciate that the present invention includes apparatus directed to performing one or more of the operations described in the present application. These devices may be specially designed and manufactured for the required purposes, or they may comprise known devices in general-purpose computers. These devices have stored therein computer programs that are selectively activated or reconfigured. Such a computer program may be stored in a device (e.g., computer) readable medium, including, but not limited to, any type of disk including floppy disks, hard disks, optical disks, CD-ROMs, and magnetic-optical disks, ROMs (Read-Only memories), RAMs (Random Access memories), EPROMs (Erasable Programmable Read-Only memories), EEPROMs (Electrically Erasable Programmable Read-Only memories), flash memories, magnetic cards, or optical cards, or any type of media suitable for storing electronic instructions, and each coupled to a bus. That is, a readable medium includes any medium that stores or transmits information in a form readable by a device (e.g., a computer).
It will be understood by those within the art that each block of the block diagrams and/or flowchart illustrations, and combinations of blocks in the block diagrams and/or flowchart illustrations, can be implemented by computer program instructions. Those skilled in the art will appreciate that the computer program instructions may be implemented by a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, implement the features specified in the block or blocks of the block diagrams and/or flowchart illustrations of the present disclosure.
Those of skill in the art will appreciate that various operations, methods, steps in the processes, acts, or solutions discussed in the present application may be alternated, modified, combined, or deleted. Further, various operations, methods, steps in the flows, which have been discussed in the present application, may be interchanged, modified, rearranged, decomposed, combined, or eliminated. Further, steps, measures, schemes in the various operations, methods, procedures disclosed in the prior art and the present invention can also be alternated, changed, rearranged, decomposed, combined, or deleted.
The foregoing is only a partial embodiment of the present invention, and it should be noted that, for those skilled in the art, various modifications and decorations can be made without departing from the principle of the present invention, and these modifications and decorations should also be regarded as the protection scope of the present invention.
Claims (14)
1. A method of installing a program, the method comprising:
judging whether the program to be installed belongs to a high-authority type; wherein, the program with high authority type has the authority higher than the authority given to the application program by the system;
when the program is judged to belong to the high authority type, judging whether the authority of the dynamic library calling folder is a read-write authority;
when the authority of the dynamic library calling folder is judged to be the read-write authority, writing an installation service file for installing a program with a high authority type into the dynamic library calling folder; wherein, the process of adjusting the authority of the dynamic library calling folder into the read-write authority comprises the following steps: deleting an important configuration file in the system, actively manufacturing a system bug, and associating the important configuration file to the dynamic library calling folder, so that after the iOS operating system is restarted, the iOS operating system actively adjusts the authority of the dynamic library calling folder into the read-write authority when the bug is repaired;
and restarting a positioning service process for positioning to assist in installing the program through the installation service file.
2. The method of claim 1, wherein determining whether the program to be installed belongs to a high privilege type comprises:
extracting identification information of a program to be installed;
and performing matching query in a preset installation authority corresponding list based on the identification information to determine the authority type of the program and judge whether the authority type is a high authority type.
3. The method of installing a program according to claim 1 or 2, further comprising:
and when the authority of the dynamic library calling folder is judged not to be the read-write authority, the authority of the dynamic library calling folder is adjusted to be the read-write authority based on a preset authority adjusting mode.
4. The method for installing the program according to claim 3, wherein the adjusting the authority of the dynamic library calling folder to the read-write authority based on a predetermined authority adjusting mode specifically comprises:
executing deletion operation on the configuration file related to the positioning service process in the system;
associating the configuration file to the dynamic library invocation folder;
and restarting the positioning service process, and adjusting the authority of the dynamic library calling folder into the read-write authority.
5. The method for installing a program according to claim 1 or 2, wherein restarting a location service process for locating to assist in installing the program through the installation service file comprises:
restarting a positioning service process for positioning, and running the installation service file in the positioning service process;
installing the program through the installation service file.
6. The method of installing a program according to claim 1 or 2, wherein the restarting the location service process for location comprises:
the restart method in the management of the positioning service process based on the system restarts the positioning service process used for positioning.
7. Method according to claim 1 or 2, characterized in that the program of the high privilege type has a privilege higher than the privilege granted by the system to the application.
8. An apparatus for installing a program, the apparatus comprising:
the type judging module is used for judging whether the program to be installed belongs to a high-authority type; wherein, the program with high authority type has the authority higher than the authority given to the application program by the system;
the authority judging module is used for judging whether the authority of the dynamic library calling folder is the read-write authority or not when the program is judged to belong to the high authority type;
the folder writing module is used for writing an installation service file for installing a program with a high authority type into the dynamic library calling folder when the authority of the dynamic library calling folder is judged to be the read-write authority; wherein, the process of adjusting the authority of the dynamic library calling folder into the read-write authority comprises the following steps: deleting an important configuration file in the system, actively manufacturing a system bug, and associating the important configuration file to the dynamic library calling folder, so that after the iOS operating system is restarted, the iOS operating system actively adjusts the authority of the dynamic library calling folder into the read-write authority when the bug is repaired;
and the process restarting module is used for restarting the positioning service process for positioning so as to assist in installing the program through the installation service file.
9. The apparatus for installing a program according to claim 8, wherein the type determining module specifically includes:
an identification information extraction unit for extracting identification information of a program to be installed;
the type determining unit is used for carrying out matching query in a preset installation authority corresponding list based on the identification information so as to determine the authority type of the program;
and the type judging unit is used for judging whether the authority type is a high authority type.
10. The program installation apparatus according to claim 8 or 9, further comprising:
and the authority adjusting module is used for adjusting the authority of the dynamic library calling folder into the read-write authority based on a preset authority adjusting mode when the authority of the dynamic library calling folder is judged not to be the read-write authority.
11. The apparatus for installing a program according to claim 10, wherein the permission adjustment module specifically includes:
the file deleting unit is used for deleting the configuration file related to the positioning service process in the system;
the file association unit is used for associating the configuration file to the dynamic library calling folder;
and the first restarting unit is used for restarting the positioning service process and adjusting the authority of the dynamic library calling folder into a reading and writing authority.
12. The apparatus for installing a program according to claim 8 or 9, wherein the process restart module specifically includes:
the second restarting unit is used for restarting the positioning service process for positioning;
the file operation unit is used for operating the installation service file in the positioning service process;
a program installation unit for installing the program through the installation service file.
13. The apparatus of installing a program according to claim 11, wherein the first reboot unit or the second reboot unit is specifically configured to reboot the location service process used for location based on a reboot method in management of the location service process of the system.
14. An apparatus for installing a program according to claim 8 or 9, wherein the program of the high privilege type has a privilege higher than that granted to the application by the system.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510944312.2A CN106886712B (en) | 2015-12-16 | 2015-12-16 | Method and device for installing program |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510944312.2A CN106886712B (en) | 2015-12-16 | 2015-12-16 | Method and device for installing program |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106886712A CN106886712A (en) | 2017-06-23 |
| CN106886712B true CN106886712B (en) | 2021-03-19 |
Family
ID=59175751
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510944312.2A Active CN106886712B (en) | 2015-12-16 | 2015-12-16 | Method and device for installing program |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106886712B (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103530118A (en) * | 2013-09-30 | 2014-01-22 | 广州华多网络科技有限公司 | Method and device for loading user-defined DLL into target progress |
| CN104199711A (en) * | 2014-09-29 | 2014-12-10 | 北京奇虎科技有限公司 | Method and device for creating root access |
| CN104346559A (en) * | 2014-11-26 | 2015-02-11 | 北京奇虎科技有限公司 | Authority request response method and device thereof |
| CN104462879A (en) * | 2014-11-28 | 2015-03-25 | 北京奇虎科技有限公司 | Root-free running control method and device of application program |
| US9141952B2 (en) * | 2009-01-15 | 2015-09-22 | Igt | EGM authentication mechanism using multiple key pairs at the bios with PKI |
-
2015
- 2015-12-16 CN CN201510944312.2A patent/CN106886712B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US9141952B2 (en) * | 2009-01-15 | 2015-09-22 | Igt | EGM authentication mechanism using multiple key pairs at the bios with PKI |
| CN103530118A (en) * | 2013-09-30 | 2014-01-22 | 广州华多网络科技有限公司 | Method and device for loading user-defined DLL into target progress |
| CN104199711A (en) * | 2014-09-29 | 2014-12-10 | 北京奇虎科技有限公司 | Method and device for creating root access |
| CN104346559A (en) * | 2014-11-26 | 2015-02-11 | 北京奇虎科技有限公司 | Authority request response method and device thereof |
| CN104462879A (en) * | 2014-11-28 | 2015-03-25 | 北京奇虎科技有限公司 | Root-free running control method and device of application program |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106886712A (en) | 2017-06-23 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9697375B2 (en) | Fast data protection using dual file systems | |
| CN106534148B (en) | Access control method and device for application | |
| US8359008B2 (en) | Security system and method for an electronic device | |
| WO2014167721A1 (en) | Data erasing device, data erasing method, program, and storage medium | |
| CN106020865A (en) | System upgrading method and device | |
| CN108763951B (en) | Data protection method and device | |
| CN107678762B (en) | System version upgrading method and device | |
| WO2017071579A1 (en) | Method and device for mining android system vulnerabilities | |
| CN111125688B (en) | Process control method and device, electronic equipment and storage medium | |
| CN106599115B (en) | Data protection method, device and terminal | |
| CN114756841A (en) | Personal private disk system and management method based on Windows virtual folder technology | |
| CN105094873A (en) | Handheld terminal system switching method and device | |
| CN106951771B (en) | Mobile terminal using method of android operating system | |
| CN108334788B (en) | File tamper-proofing method and device | |
| CN113032183A (en) | System management method, device, computer equipment and storage medium | |
| CN106886712B (en) | Method and device for installing program | |
| CN111222122A (en) | Application authority management method and device and embedded equipment | |
| KR101595936B1 (en) | Optimization method, optimization server and computer readable recording medium for providing service with vaccine and optimization functions | |
| CN109871211B (en) | Information display method and device | |
| US20080127352A1 (en) | System and method for protecting a registry of a computer | |
| KR101763184B1 (en) | File recovery method using backup | |
| CN111656755A (en) | Login method and login device for application of intelligent equipment | |
| CN110727940A (en) | Electronic equipment password management method, device, equipment and storage medium | |
| CN106778284B (en) | Method and device for detecting kernel vulnerability back end | |
| CN108629197A (en) | File access control method and system for the integration environment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20240114 Address after: 100088 room 112, block D, 28 new street, new street, Xicheng District, Beijing (Desheng Park) Patentee after: BEIJING QIHOO TECHNOLOGY Co.,Ltd. Address before: 100088 room 112, block D, 28 new street, new street, Xicheng District, Beijing (Desheng Park) Patentee before: BEIJING QIHOO TECHNOLOGY Co.,Ltd. Patentee before: Qizhi software (Beijing) Co.,Ltd. |