JP4174692B2 - Computer system, management method thereof, and recording medium - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a computer management method, and in particular, manages a computer on which a process that can be executed only by an authorized administrator is determined. For example, the present invention is suitable for managing a UNIX system workstation or the like. The present invention relates to a computer management method.
[0002]
[Prior art]
Some computer systems define an administrator and restrict processing that can be executed only by the administrator. For example, in a computer provided with UNIX in the operating system, an administrator called a super user is set, and only the super user has an authority to execute a specific command. Hereinafter, this is referred to as a super user command. Therefore, in UNIX, when using a computer, it is necessary to notify the computer in advance whether the user is a general user or a superuser. This is so-called login, and a computer performs an authentication operation by inputting a user name and a password.
[0003]
In order to use a computer as a super user, the user name and password of the super user are input to inform the computer that he is a super user. In the case of UNIX, the user name of the super user is usually “root”. Since the computer asks for a password for this user name, if a predetermined password is entered and authenticated, the computer can be used as a superuser.
[0004]
When the computer is not in the login acceptance state, it is possible to switch from the normal general user mode to the super user mode by executing “su” as a command. Authentication is performed by entering the password.
[0005]
If you log in as a superuser, you can perform computer hardware settings, system software installation / deletion, network settings, password settings, shutdown, and reboot (restart). For example, in the hardware setting, it is possible to set a connection state with various devices such as a hard disk drive, a CD-ROM drive, and a printer connected to the computer. These operations are performed by an administrator who is familiar with the system, and can be operated with few failures.
[0006]
Also, user registration and password setting / changing can be executed only by a super user. This management can prevent outsiders from entering and secure security.
[0007]
By allowing only authorized administrators to perform specific processing in this way, general users can accidentally delete hardware and software information, or prevent outsiders from entering. Therefore, the computer system can be operated smoothly.
[0008]
[Problems to be solved by the invention]
As described above, in the computer management method represented by UNIX, only an authorized administrator has the right to access a specific process or a specific area, so that it is possible to increase security. However, there is an inconvenience that some work cannot be performed in the situation where the manager is absent. For example, in a situation where the computer must be shut down due to some trouble, even if a general user shuts down the computer, the command “shutdown” can only be used by the super user. Will be asked to perform the shutdown work. Therefore, if there is no superuser in such a situation, there can be a situation where no one can perform the shutdown.
[0009]
From such a problem, Japanese Patent Laid-Open No. 3-36656 discloses a method for solving the above problem at the end of computer system operation. According to this method, the command is directly written in the user information registration file of the operating system, and the system operation is terminated, that is, the system is shut down. In the user information registration file, a user login name for terminating the system operation, a user password, a user ID, a comment, a path name (shell) of a program started at login, and the like are described in one line. . This user is a so-called general user and cannot normally be shut down. In this invention, the user having the ID registered in the user information registration file is given in advance to the user for terminating the system operation management in accordance with the access restriction mechanism supported by the operating system in accordance with the access restriction mechanism supported by the operating system. However, when logging in with the user login name and password for system operation termination, authentication is performed, and if the registered information is correct, the shell registered in the user information registration file is executed. The content of this shell is “/ etc / shudown”, and the operation is automatically terminated.
[0010]
As described above, by registering the shell for terminating the system operation and the user information in the user information registration file, a user other than the administrator can perform shutdown.
[0011]
However, this method cannot be used in recent systems. In recent UNIX and the like, it is confirmed whether a command such as “shutdown” is an execution from a super user when the command is executed. In other words, these commands allow only the superuser to execute the command by an executor confirmation mechanism inside the command, apart from the execution privilege due to access restrictions of the operating system. In Japanese Patent Laid-Open No. 3-36656, since login is performed with the user login name for system operation termination, authentication is not given and the shutdown operation is rejected. As described above, in a recent system, unless a user is logged in as a super user, the authority given only to the super user cannot be executed.
[0012]
In other words, it can be said that the security is higher than that of the conventional system. At the same time, as described above, when it is necessary to use the super user command without stopping, for example, if the super user is absent, the situation that the super user command cannot be executed again occurs.
[0013]
This application was made based on such a problem, and it is possible to execute a super user command that can be used only by a true specific administrator, and to a general user who is not originally authorized, while ensuring security. An object of the present invention is to provide a computer management method that can be used.
[0014]
[Means for Solving the Problems]
To solve the above purpose Mekon The computer system is a computer system in which an instruction that can be used only by a specific administrator is set, a background process means that operates in an administrator side process, an input means for a user to input various requests, At least the user's ID, Said request; Instruction information that is permitted to use by users who have a corresponding relationship with the request. And The background process means is started by a process having a specific authority capable of executing an instruction that can be used only by a specific administrator, and the user input from the input means. Information on management means in response to the request Refer to the ID of the user who entered the request, and determine whether the user is permitted to use the command corresponding to the request. Whether the request corresponds to an authorized command. If that A command corresponding to the request is issued to the computer system instead of the user. Here, the background process means may be activated when the computer system is activated, and may be operated as an administrator process while the computer system is operating.
[0015]
Another feature of the present invention is that the user ID is any one of a user ID, a group ID to which the user belongs, a network ID to which the user belongs, and a terminal ID used by the user. It is characterized by including one or more.
[0016]
Another feature of the present invention is that the apparatus further comprises storage means for storing a user request, the user request input from the input means is stored in the storage means, and the background process means is stored. The user's request stored in the means is read.
[0017]
Another feature of the present invention is that the background process means periodically accesses the storage means and monitors the stored information. The background process means may delete the information stored in the storage means after reading the user's request from the storage means.
[0018]
Other features of the invention are: The management means manages the user ID and the information of the command that is allowed to be used by the user corresponding to the request among the commands according to the information on the day of the week or the time or a unit combining them. It is characterized by that.
[0019]
Another feature of the present invention is that a signal transmitted from a computer system or an externally connected device is used as a user request.
[0020]
The computer system management method of the present invention is a computer system management method in which an instruction that can be used only by a specific administrator is set, operates in a process on the administrator side, and is used only by the specific administrator A background process launched by a process with specific privileges that can execute instructions that can execute at least the user ID for various requests entered by the user, Said request; Information related to commands that are allowed to be used by users who have a corresponding relationship with the request. And Management table to manage Refer to the ID of the user who entered the request, and determine whether the user is permitted to use the command corresponding to the request. Whether the request corresponds to an authorized command. If that A command corresponding to the request is issued to the computer system instead of the user. Here, the background process may be started when the computer system is started, and may always be operated by an administrator process while the computer system is operating.
[0021]
Another feature of the present invention is that the user ID is any one of a user ID, a group ID to which the user belongs, a network ID to which the user belongs, and a terminal ID used by the user. It is characterized by including one or more.
[0022]
Another feature of the present invention is that the input user request is stored in the storage unit, and the background process reads the user request stored in the storage unit.
[0023]
Another feature of the present invention is that the background process periodically accesses the storage unit and monitors the stored information. In addition, the background process may delete the information stored in the storage unit after reading the user's request from the storage unit.
[0024]
Other features of the invention are: At least one argument is added to the request, and the management means manages each request with the argument associated with information on a command permitted to be used by the user. And
[0025]
Another feature of the present invention is that a signal transmitted from a computer system or an externally connected device is used as a user request.
[0026]
The recording medium of the present invention has a computer system in which an instruction that can be used only by a specific administrator is set, a background process means that operates as a process on the administrator side, and an input for a user to input various requests. Means, at least the user's ID, Said request; Instruction information that is permitted to use by users who have a corresponding relationship with the request. And Utilization that functions as a management means for management and is started by a process having a specific authority capable of executing an instruction that can be used only by a specific administrator and input from an input means Management information in response to the Refer to the ID of the user who entered the request, and determine whether the user is permitted to use the command corresponding to the request. Whether the request corresponds to an authorized command. If that A program for operating the computer system is recorded so as to issue a command corresponding to the request to the computer system instead of the user.
[0027]
Furthermore, a program may be recorded so that the computer system is operated such that the request input by the user is stored and the background process unit reads the request from the storage unit.
[0028]
Since the present invention uses the technology as described above, even if it is a command that can be used only by a specific administrator, a request from the user corresponding to the command is executed by the process on the administrator side. The ground process determines whether or not the permission can be granted based on the management means, and if so, issues a command corresponding to the request to the computer system. Be able to run. In addition, since the background process is always running after activation, the user can issue a request at any time.
[0029]
According to another feature of the present invention, since the command is issued after the background process performs a predetermined process, the command can be executed like a procedure actually performed by the administrator.
[0030]
According to another feature of the present invention, since a signal from an internal device or an external device is used as a user's request, a cooperative operation between the computer system and another device is possible.
[0031]
By causing the computer system to execute the program recorded on the recording medium of the present invention, even if it is an instruction that can be originally used only by a specific administrator, a request from the user corresponding to the command is sent to the administrator. The background process operating in the side process determines whether or not the permission can be granted based on the management means, and if so, the computer system can be operated so as to issue a command corresponding to the request on behalf of the user. If a general user is permitted, an administrator command can be executed.
[0032]
DETAILED DESCRIPTION OF THE INVENTION
A first embodiment of the present invention will be described. In the present embodiment, a system having a UNIX operating system will be described as an example. However, the present embodiment is not limited to this.
[0033]
As described above, in UNIX, there is a difference in work that can be processed when logged in as a super user and when logged in as a general user. Work that can be processed by a general user can be processed in the same way by a super user, but some of the work that can be processed by a super user cannot be processed by a general user. Hereinafter, commands that can be used by general users are referred to as general user commands.
[0034]
FIG. 1 is a block diagram of a system for explaining a computer management method of the present invention, and FIG. 2 is a flow diagram for explaining a flow at startup when the present invention is applied to a UNIX system.
[0035]
In FIG. 1, a central processing unit 1 is a central part of a computer and a part that centrally manages all controls. Although the central processing unit may indicate only a processor chip provided in the computer, in this specification, the following parts are referred to as a central processing unit. The process control unit 2 handles a process for operating a computer, and operates each process by time sharing or the like. The upper user process 3 manages a process that can be used only by a super user. A plurality of processes can be started simultaneously in the super user process 3, and the proxy daemon 4a and the like are started in FIG. This proxy daemon 4a will be described in detail later.
[0036]
In addition to the super user process 3, the process control unit 2 includes a general user process 5, and the processes included in the general user process 5 can be used by general users. Yes. The usrit process 6 will be described later.
[0037]
The memory 7 is a so-called semiconductor memory device such as a DRAM that temporarily stores data during processing by the computer and a read-only ROM. The storage device 8 represents a hard disk drive, a CD-ROM drive, a floppy disk drive, or the like. The display unit 11 is also connected to the central processing unit 1 such as a screen such as a CRT, a keyboard 12 as a user input device, a printer 13 as an output device, an uninterruptible power supply 14 and the like. Further, it is connected to another computer 16 or the like via the network 15. The uninterruptible power supply 14 is directly connected to a computer power supply, and the connection in FIG. 1 is connected to a signal line for transmitting other control signals.
[0038]
Next, the operation when the computer is started will be described with reference to FIG. First, when the power is turned on (STEP 1), the boot program recorded in the ROM (memory 7) of the computer is started (STEP 2). By this boot program, the startup program normally recorded in the 0th block on the hard disk (storage device 8) is started (STEP 3). In UNIX, the 0th block on the hard disk is an area that cannot be directly accessed by a normal file storage command, and the startup program is stored in this area so that it can be safely executed without being overwritten by mistake. be able to.
[0039]
Next, the startup program starts a file “/ boot” (STEP 4). / Boot is a program stored in the memory 7 of the computer for starting the process control unit 2. Thereafter, the UNIX system is actually activated. After starting, the process control unit 2 performs an error check of the memory 7 and then executes “/ etc / init” (FIG. 14B), which is one of UNIX processes (STEP 5). This is a UNIX process executed for the first time after the computer is started. This “init” process 4 b is executed by the super user process 3. The “init” process 4b performs activation of a shell for a single super user. That is, the super user can execute the management function alone here, and can perform various settings before the general user uses it.
[0040]
Next, the “init” process 4b executes a file “/ etc / rc” (hereinafter simply referred to as “rc file”) (STEP 6). The rc file contains a script for making settings for operating the computer smoothly.
[0041]
FIG. 3A shows an example of an rc file. Since the rc file is a so-called script, the processes are performed in the order described. For example, in the second line “PATH”, a command search path on a UNIX file system having a hierarchical structure is set. “Mount-at 4.2” indicates that if the computer has a local disk, the file system is mounted there. Also, “quotacheck-a-p” and “quotaon-a” specify disk quota check and activation. The disk quota is a function for controlling the disk space that can be used by each user.
[0042]
As described above, the necessary file system is mounted by executing the rc file, or the necessary file is executed or deleted to mainly prepare the file system. At this time, necessary processes are also started.
[0043]
Thereafter, preparation for the multi-user mode is performed (STEP 7), and a user login can be accepted (STEP 8).
[0044]
The above is a general flow at the time of starting UNIX, and at this time, the computer is in a state of waiting for the user to log in. When logging in in the super user mode, it is only necessary to input “root” as a login name and a predetermined password. When logging in as a general user, login can be performed with a predetermined login name and password. With such a computer startup method, a general user cannot execute a superuser command.
[0045]
Therefore, in the present invention, at startup Execute The following settings are made in the rc file of STEP6. This setting is performed by the super user editing the script in the rc file. In this part of the rc file in FIG. 3B, a setting for starting a process that is always started is described. For example, “update” periodically changes the contents of the memory 7 to a hard disk (storage device 8). And “cron” is a process for executing a process defined along a file of a time table (not shown) / usr / lib / crontab. The process activated here is a so-called background process, and always operates in the background while the computer is activated.
[0046]
In the present invention, the background process is set to start a process “dummy” called a proxy daemon 4a. Since the proxy daemon 4a is activated by a super user process, it can execute a super user command. The proxy daemon 4a monitors a request input from the user, and if the request means a super user command, determines whether the request can be executed, and executes the super user command on behalf of the user. It works to execute. For this determination, a management table 9 described later is used.
[0047]
Any request is input as a command from the user. As described above, the command includes a super user command and a general user command, and the system determines whether the command is a super user command or a general user command. In the system of the present invention, the system determines the super user command and the general user command in the same manner as in the past. That is, even if a general user inputs a super user command, the execution is rejected.
[0048]
In the present invention, when a general user wants to perform “shutdown”, for example, he / she inputs a proxy superuser command “usrshut”. It is assumed that “usrshut” is not a command originally possessed by UNIX but is set by a super user of this computer, and is defined as a command that a general user inputs when shutting down. When there is a request for the proxy super user command “usshut” from the user, the proxy daemon 4a activated from the rc file in advance inquires the user name of the user who has input the proxy super user command in the management table 9, and the user It is determined whether or not the “shutdown” command is permitted. If the execution of the command is permitted as a result of the determination, the proxy daemon 4a executes “shudown” which is originally a super user command.
[0049]
The management table 9 is created in advance by a super user, and information on what processing (request) is permitted for which general user is defined. In the management table 9 of FIG. 4A, one super user command is described in each row, and subsequently, a user name that can execute the super user command is described. The first line is “shutdown”, meaning that this command can be executed by user A, user B, and user D.
[0050]
On the other hand, in the definition file (not shown), the correspondence between the super user command and the corresponding proxy super user command is defined, and the proxy daemon 4a interprets the meaning of the proxy super user command and makes a determination in the management table 9. . In this embodiment, an example in which the management table 9 and the definition file are separately described is described. For example, in FIG. 4A, a column in which proxy superuser commands corresponding to each superuser command are associated is provided. You may manage within one table.
[0051]
Since the management table associates the user name with the request, it can be created so as to enumerate the commands permitted for the user name as shown in FIG. 4B, contrary to FIG. Alternatively, as shown in FIGS. 4 (c) and 4 (d), it is possible to limit by day of the week or time. When restricting by time, it is possible to make detailed settings by making a statement such as “who can execute which command from what time to what time”. The management table can be variously set by combining these constraint conditions. In FIG. 4, the user ID is simply described as the user name. However, for example, the ID of the group to which the user belongs, the ID of the network to which the user belongs, the ID of the terminal used by the user, or the like may be used. Good.
[0052]
This is a flow when the basic activation of the present application and the command of the proxy daemon 4a are accepted. As described above, when the user requests a predetermined proxy super user command, the proxy daemon 4a interprets the command contents and the user name. If the request is from an authorized user, the proxy daemon 4a takes the place of the general user. To execute a predetermined super user command.
[0053]
Next, processing after receiving a proxy super user command will be described. The proxy daemon 4a performs a predetermined operation in a batch process when executing a super user command corresponding to the proxy super user command. For example, when “usshut” is accepted as a proxy superuser command and the corresponding superuser command “shdowndown” is executed, first, when starting “shutterdown”, a processing history is left in the log file. This is used for recording information such as who executed when and what command and confirming what processing has been performed.
[0054]
Next, the prescript is executed. This is a script that describes a process for updating data before shutting down when a database or the like is running, or for terminating a running program. Alternatively, a message to shut down is sent to the user of another computer 16 connected via the network 15 or the like.
[0055]
Next, the proxy super user command passed from the user to the proxy daemon 4a is deleted. This is to prevent the same command from being executed again by mistake when it is started next time. When a series of processing is completed, the actual stop operation is started.
[0056]
The general user passes a proxy superuser command “usshut” to the proxy daemon 4a in order to shut down, but an argument can be used for the proxy superuser command.
[0057]
For example, the usrit process 6 is used to request various instructions from the proxy daemon 4a, and the user inputs a command "usinit" to execute this process. Here, 0, 1, 2,. . . And make the request contents different depending on the argument. For example, “usrinit 0” can be shut down, “usritit 6” can be rebooted, etc. Even in the same “usinit”, the instruction can be changed by an argument.
[0058]
Use the command “pkadd” to install the software, for example, access the floppy disk package and install the software.
To do so, a command and an argument “pkadd-d / dev / rfd0a” are input. Here, a proxy super user command “usrpkgadd” corresponding to this command is set, and when the command “usrpkgadd -d / dev / rfd0a” is requested with this command, the proxy daemon 4a super The user command “pkadd-d / dev / rfd0a” is executed.
[0059]
An advantage of giving an instruction using a method using arguments is that several processes can be instructed at once by adding a plurality of arguments. Although many UNIX commands can originally use arguments, among them, combinations of commands and arguments that are relatively frequently used can be assigned to one argument. For example, an instruction with an argument of “shutdown +10” in UNIX starts a shutdown process after 10 minutes. Alternatively, when “shutdown 21:00” is designated, the shutdown process is started at 21:00. Thus, the shutdown operation is often started after a certain period of time without being performed immediately. Further, there may be a case where a plurality of arguments are accompanied, such as “shutdown -h now”. If these are set as “usrinit 3”, “usrinit 4”, “usrinit 5”, etc., predetermined arguments can be processed. The argument is set in the management table 9 by the superuser, and the proxy daemon 4a executes processing with reference to this.
[0060]
In the above description, requests from general users are input as proxy super user commands, which are received directly by the proxy daemon 4a. Another method for receiving the request from the general user by the proxy daemon 4a will be described. Here, the input command is temporarily stored in the storage area by the general user side process 5. For example, it is written in a file 10 called / tmp / usinit_file in the storage device 8.
[0061]
On the other hand, the proxy daemon 4 a of the super user process 3 periodically monitors the / tmp / usinit_file file 10 stored in the storage device 8. For example, the contents of the file 10 are confirmed every 10 seconds, and if a request from a general user is stored, it is read, and if it is permitted with reference to the management table 9, it is executed.
[0062]
Alternatively, this may be stored in the memory 7. Although it is relatively easy for other users to view and rewrite the file, it is difficult to access the information stored in the specific area of the memory 7 and the security is further improved. In the case of the memory 7, there is a high possibility that data will be erased before restarting. As described above, the proxy super user command is deleted after being interpreted by the proxy daemon 4a to prevent a malfunction. However, when the shutdown request is written in the file 10 and the shutdown is performed, the contents of the file 10 should be saved. If it is not deleted, shutdown can be initiated again when it is restarted. Since the memory 7 is normally cleared at the time of restart, such a problem is unlikely to occur.
[0063]
When a general user requests a proxy super user command in this way, the proxy daemon 4a interprets the command contents and the user name. If the request is an authorized request from an authorized user, the proxy daemon 4a takes the place of the general user. A predetermined super user command can be executed.
[0064]
In this embodiment, the super user process 3 and the general user process 5 are operating in one computer, and the request from the user is processed in the computer. A user may issue a request from the computer 16 via the network 15.
[0065]
Next, a second embodiment will be described. In FIG. 1, an uninterruptible power supply 14 is provided in the event of a power failure and stores power therein so that even when a power failure occurs, the computer can continue to operate for a certain period of time to perform a shutdown operation or the like. As a result, it is possible to prevent irregular termination even at the time of a power failure and to improve safety. In recent years, the uninterruptible power supply 14 has been frequently connected to a computer power supply, but even in this case, the inconvenience that the computer cannot be shut down when the super user is absent has not been solved.
[0066]
Therefore, in the present embodiment, a mechanism is provided for extracting a control signal from the uninterruptible power supply 14 and transmitting it to a computer. Normally, the computer is only supplied with power from the uninterruptible power supply 14. The uninterruptible power supply 14 continues to store power in the power storage unit when it is normal, but when a power failure occurs, the function is switched to supply power to other devices connected to the power supply. At this time, the switching of the operation is hardly recognized from the other device side. On the other hand, in the present embodiment, when the function on the uninterruptible power supply 14 side is switched, a signal to that effect is issued from the uninterruptible power supply 14. The proxy daemon 4a of the computer receives a signal notifying the power failure generated from the uninterruptible power supply 14, and starts a shutdown operation, for example. That is, in the first embodiment, the proxy daemon 4a executes the super user command in response to the proxy super user command from the general user. However, in this embodiment, the proxy daemon 4a receives the signal from the uninterruptible power supply 14 as a signal. It can interpret and execute superuser commands.
[0067]
In this way, even in the event of a power outage that occurs suddenly, the uninterruptible power supply 14 is combined with the computer system of the present invention, and its control signal can be used to significantly increase safety.
[0068]
It should be noted that the present invention is software that causes a computer to perform the above operation as an actual embodiment, and can be realized by installing this software in the computer. In other words, if a program is created so as to perform the operations of the embodiments described so far and recorded on a recording medium such as a CD-ROM or a floppy disk, the program can be read and executed by a computer. The above management can be performed.
[0069]
【The invention's effect】
As described above, if the computer system of the present invention is used, it is possible to execute a super user command, which can be used only by a real super user, to an ordinary user who is not originally authorized while ensuring security. Can be made available, so that even if a superuser is absent in the event that the computer must be shut down in an emergency, an authorized general user can work on behalf.
[0070]
In addition, superuser commands can be executed in response to signals from other devices connected to the computer, such as an uninterruptible power supply, and safety in an emergency can be maintained.
[0071]
In addition, it is software that performs these operations, and this function can be provided by installing this software in a computer, so if it is recorded on a recording medium such as a CD-ROM or floppy disk, The computer can easily read and execute the program.
[Brief description of the drawings]
FIG. 1 is a block diagram for explaining an embodiment of the present invention.
FIG. 2 is a flowchart for explaining a flow when a computer is started.
FIG. 3 is a diagram illustrating an rc file.
FIG. 4 is a diagram illustrating an example of a management table.
[Explanation of symbols]
1 Central processing unit
2 Process control unit
3 Super user process
4a Proxy daemon
4b / etc / init
5 General user process
6 usrinit
7 memory
8 Storage device
9 Management table
10 / tmp / usrinit_file
11 Display
12 Keyboard
13 Printer
14 Uninterruptible power supply
15 network
16 Other computers on the network

Claims (18)

In a computer system with instructions that can only be used by a specific administrator,
Background process means operating in the administrator side process;
An input means for the user to input various requests;
A management unit that manages at least the ID of the user, the request, and information on a command that is allowed to be used by the user in a correspondence relationship with the request among the commands;
With
The background process means includes
Launched in a process with specific privileges capable of executing instructions that can only be used by the specific administrator,
In response to the user request input from the input means, the information of the management means is referred to, and the user corresponding to the request is used by using the ID of the user who has input the request. It is determined whether the request is permitted, and if the request is a request corresponding to the permitted command, the command corresponding to the request is issued to the computer system instead of the user. Computer system.   2. The computer system according to claim 1, wherein the background process means is started when the computer system is started, and is always operated by the manager side process while the computer system is operating.   The user ID includes at least one of the user's personal ID, the group ID to which the user belongs, the network ID to which the user belongs, and the terminal ID to be used by the user. The computer system according to claim 1 or 2. Storage means for storing the user request;
The user request input from the input means is stored in the storage means,
4. The computer system according to claim 1, 2, or 3, wherein the background process means reads the user request stored in the storage means.   5. The computer system according to claim 4, wherein the background process means periodically accesses the storage means and monitors the stored information.   6. The computer system according to claim 4, wherein the background processing means deletes the information stored in the storage means after reading the user request from the storage means.   The management means further restricts the use of the command by a user according to a day of the week, a time, or a combination thereof, and further, the user ID and the use corresponding to the request among the commands 7. The computer system according to claim 1, 2, 3, 4, 5 or 6, wherein information on a command permitted to be used by a user is managed in association with information relating to day of the week or time, or a unit combining them. .   8. The computer system according to claim 1, wherein a signal transmitted from a device connected inside or outside the computer system is used as the user request. . A computer system management method in which a command that can be used only by a specific administrator is set,
A background process that runs in an administrator-side process and is started by a process with specific privileges that can execute instructions that can only be used by the specific administrator.
For various requests entered by users,
Reference is made to a management table that manages at least the ID of the user, the request, and information related to an instruction that allows the user to use the instruction in a correspondence relationship with the request, and the request Is used to determine whether the user is permitted to use the command corresponding to the request, and if the request is a request corresponding to the permitted command, A computer system management method, wherein a command corresponding to the request is issued to the computer system in place of a user.   The computer system management method according to claim 9, wherein the background process is started when the computer system is started, and is always operated by the administrator side process while the computer system is operating. The user ID includes at least one of the user's personal ID, the group ID to which the user belongs, the network ID to which the user belongs, and the terminal ID to be used by the user. The method of managing a computer system according to claim 9 or 10 . The input user request is stored in the storage unit,
12. The computer system management method according to claim 9, 10 or 11, wherein the background process reads the user request stored in the storage unit.   13. The computer system management method according to claim 12, wherein the background process periodically accesses the storage unit and monitors the stored information.   14. The computer system management method according to claim 12, wherein the background process deletes the information stored in the storage unit after reading the user's request from the storage unit.   At least one argument is added to the request, and the management unit manages, in association with each request to which the argument is added, information on an instruction that allows the user to use the information. The computer system according to claim 1, 2, 3, 4, 5, 6, 7 or 8.   The computer system management according to claim 9, 10, 11, 12, 13, or 14, wherein a signal transmitted from a device connected inside or outside the computer system is used as the user request. Method. A computer system with instructions that can only be used by specific administrators
Background process means operating in the administrator side process;
An input means for the user to input various requests;
A management unit that manages at least the ID of the user, the request, and information on a command that is allowed to be used by the user in a correspondence relationship with the request among the commands;
As well as function
The background process means is activated by a process having a specific authority capable of executing an instruction that can be used only by the specific administrator, and in response to a user request input from the input means. With reference to the information of the management means, using the ID of the user who entered the request, it is determined whether or not the user is permitted to use the command corresponding to the request, and the request is permitted. A recording medium storing a program for operating the computer system to issue a command corresponding to the request to the computer system instead of the user if the request corresponds to the command.   18. The recording medium according to claim 17, wherein a program for operating a computer system is recorded so that the background process means reads out the request from storage means for storing the request input by the user.

Images