CN103377042A - Privilege escalation method and system in Unix-like environment of windows system - Google Patents
Privilege escalation method and system in Unix-like environment of windows system Download PDFInfo
- Publication number
- CN103377042A CN103377042A CN2012101220866A CN201210122086A CN103377042A CN 103377042 A CN103377042 A CN 103377042A CN 2012101220866 A CN2012101220866 A CN 2012101220866A CN 201210122086 A CN201210122086 A CN 201210122086A CN 103377042 A CN103377042 A CN 103377042A
- Authority
- CN
- China
- Prior art keywords
- power
- operational order
- windows
- carrying
- account number
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The embodiment of the invention provides a privilege escalation method and system in a Unix-like environment of a windows system. The privilege escalation method comprises adding an operation and maintenance account into an administrator group; receiving an operation request of privilege escalation, analyzing out the operation and maintenance account and an operation command of privilege escalation of a Unix-like format from the operation request of privilege escalation, and converting the operation command of privilege escalation of the Unix-like format into an operation command of privilege escalation of a windows format; applying the operation and maintenance account and creating sub-processes through an API (application program interface) which allows a user to use an assigned user account for creating processes to execute the operation command of privilege escalation of the windows format. According to the privilege escalation method and system in the Unix-like environment of the windows system, the function of command privilege escalation in the Unix-like environment can be achieved in the windows system, environments of Cygwin and cmd in the windows system are compatible and supported, and path analyses of Cygwin and redirecting of output results are supported.
Description
Technical field
Embodiment of the present invention relates to the Account Administration technical field, more specifically, relates to the power of the carrying method and system under the class Unix environment of a kind of form (windows) system.
Background technology
Along with the continuous upgrading of computer hardware and software systems, the form of Microsoft (windows) operating system is upgraded to 64 bit manipulation systems also in continuous upgrading from 16,32 always.From windows95, NT, 97,98,2000, Me, XP, Server, the Vista that initial windowsl.0 knows to everybody, the continuous updating of the various versions such as Windows 7.
Class Unix system refers to various traditional Unix systems (such as the Solaris of FreeBSD, OpenBSD, SUN company) and the similar system of various and traditional Unix (such as Minix, Linux, QNX etc.).Although they have plenty of free software, have plenty of business software, all considerably inherited the characteristic of original Unix, many resemblances are arranged, and all observe to a certain extent the POSIX standard.On the windows platform, can move at present some Unix simulated environments, such as the free software Cygwin of cygnus solutions company exploitation etc.
The power carried refers to improve the authority of account number in server, if the role of certain account number in the windows system is guest or common user, the rear authority (being exactly the root authority below the Linux) that just can become super keeper of the power of carrying, can carry out the operation of a lot of high authorities, the power of higher management system is arranged.Under linux system, can login with the real name account number of low rights first, then switch to the O﹠M account number that possesses general authority by the su order, carry out actual O﹠M and operate, operate if need to use the operation of higher authority then put forward power by the Sudo operation temporarily.Yet the windows system default does not provide the sudo function, and the control of this super-ordinate right of administrator and management can't adapt to the safety management idea that real name audit and authority minimize distribution.
One cover is arranged based on the SudoWin instrument of .Net framework at present below the windows environment, finished by SANS Institute exploitation.Sudowin has the service routine that relates to system (system) authority, client is sent the sudo command request, server end receives this command request and utilizes the high authority of its system that this domestic consumer's account number is joined in the Administrators group temporarily, then realizes the operation of high authority.
Yet present Sudowin has following shortcoming:
(1) Sudowin does not support class Unix environment (for example, not supporting the Cygwin environment).Such as: undertaken having at least 2 problems by the order that Cygwin carries if propose the power operation: resolve not to (path of the similar Linux of path form of Cygwin) in the path; The Output rusults of program can not be presented at above the shell of again being born (BASH, GNU Bourne-Again SHell) of Cgywin.
Need account number to sign in in the system when (2) Sudowin carries out the sudo operation; otherwise can not carry out; this and the system of real name account number login of only using at present low rights; the O﹠M account number (for safeguard protection, O﹠M account number can not network entry) that switches to general authority uses the flow process of sudo operation that larger conflict is arranged.
(3) need that in O﹠M work the real name account number is switched to the O﹠M account number and carry out again O﹠M work, but Sudowin can not provide the function of switching account number.
Summary of the invention
Embodiment of the present invention proposes the power of the putting forward method under the class Unix environment of a kind of form (windows) system, puies forward the power function to realize the order under the class Unix in the Windows system.
Embodiment of the present invention proposes the power of the putting forward system under the class Unix environment of a kind of form (windows) system, puies forward the power function to realize the order under the class Unix in the Windows system.
The concrete scheme of embodiment of the present invention is as follows:
The power of carrying method under the class Unix environment of a kind of form (windows) system comprises:
The O﹠M account number is joined in the group of administrators;
The power operation requests is put forward in reception, weighs the power of the putting forward operational order that parses O﹠M account number and class Unix form the operation requests from described carrying, and the power of the putting forward operational order of described class Unix form is converted to the power of the putting forward operational order of windows form;
Use described O﹠M account number, by carrying out with the user account number of appointment application programming interface (API) the establishment subprocess of process creation, to carry out the power of the putting forward operational order of described windows form.
The power of carrying system under the class Unix environment of a kind of form (windows) system, this device comprises request module and puies forward the power module; Wherein:
Request module, be used for receiving and put forward the power operation requests, from the described power of the carrying operational order that parses O﹠M account number and class Unix form the power operation requests of carrying, and the power of the carrying operational order of described class Unix form is converted to the power of the putting forward operational order of windows form, wherein said O﹠M account number is added in the group of administrators;
Put forward the power module, be used for using described O﹠M account number, create subprocess by the API that can carry out with the user account number of appointment process creation, to carry out the power of the putting forward operational order of described windows form.
Can find out from technique scheme, in embodiment of the present invention, at first the O﹠M account number is joined in the group of administrators, then receive and put forward the power operation requests, from put forward the power operation requests, parse the power of the putting forward operational order of O﹠M account number and class Unix form, and the power of the carrying operational order of class Unix form is converted to the power of the putting forward operational order of windows form, use again the power of the putting forward operational order that the O﹠M account number is carried out this windows form.This shows, use embodiment of the present invention after, by proposing the conversion of power operational order form, can realize in the windows system that the order under the class Unix puies forward the power function.Such as, compatibility is supported Cygwin and the cmd environment under the windows operating system comprehensively.Embodiment of the present invention not only can be put forward power and finish the operational order that the system of windows own carries, and also supports the order that Cygwin carries fully, and can support the path parsing of Cygwin and being redirected of Output rusults comprehensively.
Description of drawings
Fig. 1 is according to the power of the carrying method flow diagram under the class Unix environment of the windows system of embodiment of the present invention;
Fig. 2 is according to the power of the carrying system architecture synoptic diagram under the class Unix environment of the windows system of embodiment of the present invention;
Fig. 3 is according to the power of the carrying method sequential chart under the class Unix environment of the windows system of embodiment of the present invention.
Embodiment
For making the purpose, technical solutions and advantages of the present invention clearer, the present invention is described in further detail below in conjunction with accompanying drawing.
The operation machine is disposed the initial stage in the windows system, all O﹠M account numbers can be joined in the Administrators group by script.
Fig. 1 is according to the power of the carrying method flow diagram under the class Unix environment of the windows system of embodiment of the present invention.
As shown in Figure 1, the method comprises:
Step 101: the O﹠M account number is joined in keeper (administrator) group.
Step 102: receive and put forward the power operation requests, from put forward the power operation requests, parse the power of the putting forward operational order of O﹠M account number and class Unix form, and the power of the putting forward operational order of class Unix form is converted to the power of the putting forward operational order of windows form.
, at first receive the power of the putting forward operation requests by user's input here, and include the power of the putting forward operational order of O﹠M account number and class Unix form in the power of the putting forward operation requests of user's input.After parsing the power of the putting forward operational order of O﹠M account number and class Unix form, the power of the putting forward operational order of class Unix form need to be converted to the power of the putting forward operational order of windows form.
The preferred power of the carrying operational order that further judges whether to dispose this windows form; If have, then execution in step 103; If no, then withdraw from this flow process.
Such as, can carry out this judgement at the ldap server place.Can in the message catalog tree of ldap server, store about putting forward the relevant configuration of power operational order, when the user need call the power put forward when operational order, the ldap server end carries out the configuration whether inquiring and authenticating has this order, if commands match then carry out, otherwise refuse this and propose the power operation, thereby accomplish that authority minimizes.More specifically, the sudo order that can carry out in ldap server end configure user, when the user need call sudo exectorial the time, the ldap server end carries out the configuration whether inquiring and authenticating has this order, if commands match then carry out is proposed the power operation otherwise refuse this sudo.
Preferably, class Unix environment can be the Cygwin environment.Cygwin is a Unix simulated environment of moving at the windows platform, is the free software of Cygnus Solutions company exploitation.Cygwin is for study Unix/Linux operating environment, and perhaps the application migration from Unix to windows is perhaps carried out some special development, especially uses the gnu tool set to carry out embedded system development at windows, and is very useful.Use after the Cygwin, at windows platform operation BASH and developing instrument, user instrument, sensation is just as working at Linux.
When class Unix environment is the Cygwin environment, the path of weighing operational order of carrying of Cygwin form need to be converted to the windows standard routes, thereby realizes the power of the putting forward operational order of class Unix form is converted to the power of the putting forward operational order of windows form.
Preferably, in putting forward the power operation requests, may further include the power of the putting forward operational order of windows form.At this moment, can from put forward the power operation requests, parse the power of the putting forward operational order of this windows form, and then the processing priority of the power of the carrying operational order of class Unix form is set to the processing priority of putting forward the power operational order of the windows form that parses greater than this, thus the order that priority processing is carried by class Unix environment.
Such as, when class Unix environment is the Cygwin environment, and carry and weigh the power of the putting forward operational order that had both comprised the windows form in the operation requests, the power of the carrying operational order that comprises again the Cygwin form, then need with the Cygwin form the power of carrying operational order path then convert the windows standard routes to, and revise the priority of each order, thereby preferentially carry out the order that carries in the Cygwin environment.
And, because the login of machine need to by the checking of ldap server, can be refused the O﹠M account number and sign in in the entity machine by the configuration ldap server, thereby the O﹠M account number is defined as and can only uses when O﹠M operates.
Step 103: use the O﹠M account number, by carrying out with the user account number of appointment application programming interface (API) the establishment subprocess of process creation, to carry out the power of the putting forward operational order of described windows form.
Particularly, after creating subprocess, all Output rusults of subprocess are redirected in the anonymous pipeline, and read this pipeline handle by API, described all Output rusults are presented in described class Unix environment and the windows system.
, can at first use the O﹠M account number here, create subprocess by the CreateProcessWithLogonW order, then be presented in described class Unix environment and the windows system by the progress information of WriteFile order with this subprocess.
Particularly, when class Unix environment is that Cygwin environment and windows platform are when comprising cmd, by calling application programming interface (Api) the order CreateProcessWithLogonW in the windows platform, can specifically use the identity of this O﹠M account number to remove to create subprocess.Because O﹠M account number acquiescence is in the Administrators group and therefore had the authority of Administrator, so the subprocess that creates just can have been finished the operation of high authority.Then, can be with all output redirections of the subprocess that creates in this pipeline by anonymous pipeline, the api command WriteFile by standard reads this pipeline handle again, thereby all Output rusults are presented at Cygwin in real time with above the cmd.
Based on above-mentioned analysis, embodiment of the present invention also proposes the power of the putting forward system under the class Unix environment of a kind of windows system.
Fig. 2 is according to the power of the carrying system architecture synoptic diagram under the class Unix environment of the windows system of embodiment of the present invention.
As shown in Figure 2, this system comprises request module 201 and puies forward power module 202.Wherein:
Carry power operation requests generally by the user input the institute provide.In one embodiment, may further include the power of the putting forward operational order of windows form in the power of the putting forward operation requests of user's input.At this moment, request module 201 can parse the power of the putting forward operational order of this windows form from put forward the power operation requests, and then the processing priority of the power of the carrying operational order of class Unix form is set to the processing priority of putting forward the power operational order of the windows form that parses greater than this, thus the order that priority processing is carried by class Unix environment.
And, at the windows system operation deployment initial stage, all O﹠M account numbers can be joined in the Administrators group by script.
Put forward power module 202, be used for using described O﹠M account number, create subprocess by the API that can carry out with the user account number of appointment process creation, to carry out the power of the putting forward operational order of described windows form.
In this system, may further include Light Directory Access Protocol (LDAP) module 203.
Preferably, because the login of request module 201 need to can be refused the O﹠M account number and sign in in the request module 201 by configuration LDAP module 203 by the checking of LDAP module 203, the O﹠M account number is defined as in the O﹠M operation, uses like this.
In one embodiment, class Unix environment is the Cygwin environment.In this case, request module 201 is used for the path of weighing operational order of carrying of Cygwin environment is converted to the windows standard routes.
In one embodiment, this system further comprises read module.After read module be used for to create subprocess, all Output rusults of described subprocess are redirected in the anonymous pipeline, and read this pipeline handle by API, described all Output rusults are presented in described class Unix environment and the windows system.
In one embodiment, put forward power module 202, be used for using the O﹠M account number, create subprocess by the CreateProcessWithLogonw order, and by the WriteFile order this subprocess information is presented in described class Unix environment and the windows system.
Particularly, when class Unix environment is that Cygwin environment and windows platform are when comprising cmd, by calling application programming interface (Api) the order CreateProcessWithLogonW in the windows platform, can specifically use the identity of this O﹠M account number to remove to create subprocess.Because O﹠M account number acquiescence is in the Administrators group and therefore had the authority of Administrator, so the subprocess that creates just can have been finished the operation of high authority.Then, can be with all output redirections of the subprocess that creates in this pipeline by anonymous pipeline, the api command WriteFile by standard reads this pipeline handle again, thereby all Output rusults are presented at Cygwin in real time with above the cmd.
In one embodiment, this system further comprises logger module 204, is used for preserving the log information of the power of the carrying operational order process of carrying out this windows form.
By logger module 204, can so that promote follow-up audit operation, which user to have carried out proposing the power operation such as concrete audit by.
Preferably, log information can physical record be put forward time, the PID of the order of power operation and establishment, user's identity, etc.
Based on above-mentioned labor, Fig. 3 is according to the power of the carrying method sequential chart under the class Unix environment of the windows system of embodiment of the present invention.
As shown in Figure 3, the method comprises as follows:
Step 301: user's logging request module, and input login account number and password.
Step 302: request module sends to ldap server (LDAP module) with login account number and the password of user's input, is authenticated by ldap server.
Step 303:LDAP server returns authentication result to login account number and password to request module, and when authentication by after execution in step 304 and subsequent step thereof, if authenticate not by then withdraw from this flow process.
Step 304: the user puies forward the power operation requests in the request module input, puies forward the power of the putting forward operational order that includes O﹠M account number and class Unix form in the power operation requests at this.Request module parses the power of the putting forward operational order of O﹠M account number and class Unix form from put forward the power operation requests, and the power of the putting forward operational order of class Unix form is converted to the power of the putting forward operational order of windows form.Such as, when class Unix environment is the Cygwin environment, the path of weighing operational order of carrying of Cygwin form can be converted to the windows standard routes.
Step 305: the power of the carrying operational order of the windows form after request module will be changed sends to the LDAP module, to be verified by the LDAP module.
Step 306:LDAP module judges whether to dispose this and puies forward the power operational order, if disposed then execution in step 307 and subsequent step thereof, otherwise withdraws from this flow process.
Step 307: the power of the carrying operational order of the windows form of request module after with the O﹠M account number that parses and conversion sends to puies forward the power module.
Step 308: put forward the power of the putting forward operational order that power module application O﹠M account number is carried out this windows form.
Here, put forward the power module and can utilize windows Api order CreateProcessWithLogonW, use the identity of this O﹠M account number to remove to create subprocess.Because O﹠M account number acquiescence is present in the Administrators group, so the O﹠M account number has had the authority of Administrator, the subprocess that therefore utilizes O﹠M account number identity to start just can be finished the operation of high authority.Can be by adopting anonymous pipe method, all output redirections of the subprocess that creates in this pipeline, are read this pipeline handle by standard A PI order WriteFile again, all Output rusults are presented at Cygwin in real time with among the cmd.
Step 309: logger module is preserved the log information in the power of the carrying operational order process of carrying out this windows form.
In above-mentioned flow process, can when the request module initialization is disposed, by script all O﹠M account number acquiescences be joined the Administrators group in advance.By step 301~302 as seen, therefore the login of request module need to can pass through configuration LDAP module by the checking of LDAP module, and refusal O﹠M account number signs in in the request module, thereby guarantees that the O﹠M account number can only use in the O﹠M operation.
Can find out from technique scheme, in embodiment of the present invention, at first the O﹠M account number is set in the group of administrators, and the power operation requests is put forward in reception, from put forward the power operation requests, parse the power of the putting forward operational order of O﹠M account number and class Unix form, then the power of the putting forward operational order of class Unix form is converted to the power of the putting forward operational order of windows form, uses again the power of the putting forward operational order that the O﹠M account number is carried out this windows form.This shows, use embodiment of the present invention after, can realize in the Windows system that the order under the class Unix puies forward the power function.Such as, compatibility is supported Cygwin and the cmd environment under the windows operating system comprehensively.Embodiment of the present invention not only can be put forward power and finish the operational order that the system of windows own carries, and also supports the order that Cygwin carries fully, and can support the path parsing of Cygwin and being redirected of Output rusults comprehensively.
And, use after the embodiment of the present invention, can satisfy the account right management expectancy, when needs went to propose the power operation with the O﹠M account number, the O﹠M account number need not to sign in in the operating system and just can operate.
In addition, use after the embodiment of the present invention, can switch arbitrarily an O﹠M account number and then utilize this O﹠M account number identity to propose the power operation, thereby promote to carry the convenience of power operation.
The above is preferred embodiment of the present invention only, is not for limiting protection scope of the present invention.Within the spirit and principles in the present invention all, any modification of doing, be equal to replacement, improvement etc., all should be included within protection scope of the present invention.
Claims (14)
1. the power of the carrying method under the class Unix environment of a form (windows) system is characterized in that, comprising:
The O﹠M account number is joined in the group of administrators;
The power operation requests is put forward in reception, weighs the power of the putting forward operational order that parses O﹠M account number and class Unix form the operation requests from described carrying, and the power of the putting forward operational order of described class Unix form is converted to the power of the putting forward operational order of windows form;
Use described O﹠M account number, by carrying out with the user account number of appointment application programming interface (API) the establishment subprocess of process creation, to carry out the power of the putting forward operational order of described windows form.
2. method according to claim 1, it is characterized in that, create subprocess after, all Output rusults of described subprocess are redirected in the anonymous pipeline, and read this pipeline handle by API, described all Output rusults are presented in described class Unix environment and the windows system.
3. method according to claim 1 is characterized in that, before the establishment subprocess, also comprises by the configuration server end, and refusal O﹠M account number signs in in the entity machine.
4. method according to claim 1 is characterized in that, carries out in the described O﹠M account number of application before the power of the carrying operational order of this windows form, and the method further comprises: the power of the carrying operational order that judges whether to dispose this windows form; If have, then use the power of the putting forward operational order that described O﹠M account number is carried out this windows form; If no, then withdraw from this flow process.
5. method according to claim 1 is characterized in that, described class Unix environment is the Cygwin environment;
The power of the carrying operational order that the described power of carrying operational order with class Unix form is converted to the windows form comprises:
The path of weighing operational order of carrying of Cygwin form is converted to the windows standard routes.
6. each described method is characterized in that according to claim 1-5, and described carrying weighed the power of the putting forward operational order that operation requests further comprises the windows form; The method further comprises:
From the described power of the carrying operational order that parses this windows form the power operation requests of carrying;
The processing priority of the power of the carrying operational order of described class Unix form is set to the processing priority of putting forward the power operational order greater than this described windows form that parses.
7. method according to claim 1 is characterized in that, describedly can comprise CreateProcessWithLogonW with the application programming interface (API) that the user account number of appointment carries out process creation.
8. method according to claim 2 is characterized in that, described API comprises WriteFile.
9. the power of the carrying system under the class Unix environment of a form (windows) system is characterized in that, this device comprises request module and puies forward the power module; Wherein:
Request module, be used for receiving and put forward the power operation requests, from the described power of the carrying operational order that parses O﹠M account number and class Unix form the power operation requests of carrying, and the power of the carrying operational order of described class Unix form is converted to the power of the putting forward operational order of windows form, wherein said O﹠M account number is added in the group of administrators;
Put forward the power module, be used for using described O﹠M account number, create subprocess by the API that can carry out with the user account number of appointment process creation, to carry out the power of the putting forward operational order of described windows form.
10. system according to claim 9, it is characterized in that, also comprise read module, after being used for creating subprocess, all Output rusults of described subprocess are redirected in the anonymous pipeline, and read this pipeline handle by API, described all Output rusults are presented in described class Unix environment and the windows system.
11. system according to claim 9 is characterized in that, also comprises Light Directory Access Protocol (LDAP) module, by disposing described LDAP module, refusal O﹠M account number signs in in the entity machine.
12. system according to claim 9 is characterized in that, also comprises Light Directory Access Protocol (LDAP) module;
Request module is for the power of the carrying operational order that sends described windows form to the LDAP module; And after receiving that checking is by order, notify the described described O﹠M account number of power module application of putting forward, create subprocess to carry out the power of the putting forward operational order of described windows form by the API that can carry out with the user account number of appointment process creation;
The LDAP module is used for sending checking by order to request module when judging the power of the putting forward operational order that disposes this windows form.
13. each described system is characterized in that according to claim 9-12, described carrying weighed the power of the putting forward operational order that operation requests further comprises the windows form;
Request module, be further used for putting forward the power of the putting forward operational order that parses this windows form the power operation requests from described, and the processing priority of the power of the carrying operational order of described class Unix form is set to the processing priority of putting forward the power operational order greater than this described windows form that parses.
14. system according to claim 9 is characterized in that, further comprises logger module, is used for preserving the log information of the power of the carrying operational order process of carrying out this windows form.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201210122086.6A CN103377042B (en) | 2012-04-24 | 2012-04-24 | Power of carrying method and system under the class Unix environment of windows system |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201210122086.6A CN103377042B (en) | 2012-04-24 | 2012-04-24 | Power of carrying method and system under the class Unix environment of windows system |
Publications (2)
Publication Number | Publication Date |
---|---|
CN103377042A true CN103377042A (en) | 2013-10-30 |
CN103377042B CN103377042B (en) | 2016-04-13 |
Family
ID=49462209
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201210122086.6A Active CN103377042B (en) | 2012-04-24 | 2012-04-24 | Power of carrying method and system under the class Unix environment of windows system |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN103377042B (en) |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103838611B (en) * | 2014-03-24 | 2017-05-03 | 北京京东尚科信息技术有限公司 | Method for maintaining Windows application software based on Linux commands |
CN109543420A (en) * | 2018-09-29 | 2019-03-29 | 中国平安人寿保险股份有限公司 | Authority configuring method, device, electronic equipment and storage medium based on sudo |
CN113596197A (en) * | 2021-09-26 | 2021-11-02 | 武汉四通信息服务有限公司 | Address switching method and device, electronic equipment and storage medium |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20080134325A1 (en) * | 2006-12-05 | 2008-06-05 | Samsung Electronics Co., Ltd. | Application program launching method and system for improving security of embedded linux kernel |
CN101359355A (en) * | 2007-08-02 | 2009-02-04 | 芯微技术(深圳)有限公司 | Method for raising user's authority for limitation account under Windows system |
-
2012
- 2012-04-24 CN CN201210122086.6A patent/CN103377042B/en active Active
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20080134325A1 (en) * | 2006-12-05 | 2008-06-05 | Samsung Electronics Co., Ltd. | Application program launching method and system for improving security of embedded linux kernel |
CN101359355A (en) * | 2007-08-02 | 2009-02-04 | 芯微技术(深圳)有限公司 | Method for raising user's authority for limitation account under Windows system |
Cited By (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103838611B (en) * | 2014-03-24 | 2017-05-03 | 北京京东尚科信息技术有限公司 | Method for maintaining Windows application software based on Linux commands |
CN109543420A (en) * | 2018-09-29 | 2019-03-29 | 中国平安人寿保险股份有限公司 | Authority configuring method, device, electronic equipment and storage medium based on sudo |
CN109543420B (en) * | 2018-09-29 | 2023-07-21 | 中国平安人寿保险股份有限公司 | Permission configuration method and device based on sud, electronic equipment and storage medium |
CN113596197A (en) * | 2021-09-26 | 2021-11-02 | 武汉四通信息服务有限公司 | Address switching method and device, electronic equipment and storage medium |
Also Published As
Publication number | Publication date |
---|---|
CN103377042B (en) | 2016-04-13 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7743147B2 (en) | Automated provisioning of computing networks using a network database data model | |
US8019835B2 (en) | Automated provisioning of computing networks using a network database data model | |
CN104767649B (en) | Dispose the method and device of bare metal server | |
US9350610B2 (en) | System and method for configuration management service | |
US7152109B2 (en) | Automated provisioning of computing networks according to customer accounts using a network database data model | |
CA2448918C (en) | Method and system for automatically configuring a client-server network | |
CN101657793B (en) | Method, system and computer program for configuring firewalls | |
US20140157380A1 (en) | Method And System For Hybrid Software As A Service User Interfaces | |
CN104243154A (en) | Server user authority centralized control system and server use authority centralized control method | |
US20230244801A1 (en) | Systems and methods for maintaining immutable data access logs with privacy | |
CN110463163A (en) | For providing the on-demand method and system for waking up access to conversation server | |
JP2005514699A (en) | Method and system for hosting multiple dedicated servers | |
CN103648090A (en) | Method for realizing security and credibility of intelligent mobile terminal and system thereof | |
CA3116661A1 (en) | System and method for automated information technology services management | |
CN103377042A (en) | Privilege escalation method and system in Unix-like environment of windows system | |
CN115580616A (en) | Cloud RPA system under multi-tenant architecture and multi-cloud platform and application method | |
CN103561082B (en) | Compressing request processing method and server | |
CN114416169A (en) | Data processing method, medium, device and computing equipment based on micro front end | |
CN102567050A (en) | Method and device for remote deployment of project of B/S (browser/server) system | |
US11392700B1 (en) | System and method for supporting cross-platform data verification | |
CN112394907A (en) | Container-based delivery system construction method, application delivery method and delivery system | |
CN116318859A (en) | System, method and system for safely accessing application data | |
CN111147429B (en) | Project research and development environment deployment system | |
CN115567596B (en) | Cloud service resource deployment method, device, equipment and storage medium | |
WO2002039257A2 (en) | Automated provisioning framework for internet site servers |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
C14 | Grant of patent or utility model | ||
GR01 | Patent grant |