JPH05313983A - Window mounting method by user for filing system - Google Patents

Abstract

PURPOSE:To perform a file operation similar to that on a local computer by performing mounting only by holding access permission. CONSTITUTION:A filing system 2 in a log-in computer 1 to which a user performs a log-in is comprised of a bus name hierarchical level inspection function 3, a user mount table operating function 4 provided with functions for the generation, deletion, and retrieval of a user mount table list, and a request transmission function 5. Meanwhile, a server process 7 exists on a remote computer 6 connected with network communication, and access right inspection 8 and file access processing 9 are performed by using a conventional filing system 10 based on a request from the filing system 2, and results of the processing are returned to the filing system 1 of the log-in computer 1.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a window mounting method by a user of a file system, and in particular, a file system having a hierarchical structure and having access permission classification, for example, a file system of UNIX operating system, is accessed from a mount position. The present invention relates to a window mount method by a user of a file system that determines the depth of a possible hierarchy and rebuilds the hierarchy of the file system for each user.

[0002]

2. Description of the Related Art Conventionally, a file space of a computer using a mount system is constructed by logically connecting a plurality of file systems on a local computer or a remote computer in a hierarchical structure. That is, a file on the file system can be used by mounting it. In a computer that uses the mount method, all layers below the mounted layer can be seen regardless of whether or not each user needs it. Next, if each user arbitrarily performs this mounting process, the file hierarchy becomes large and the information managed by the operating system becomes enormous. Therefore, in many cases, the mounting process is performed by a special user, so that the mounted file system becomes a common file hierarchy visible to all users. Further, in the case of a file system on a remote computer, only the file system that is published on the remote computer can be mounted. That is, as shown in FIG. 5, the file system disclosure process 51 is first performed on the remote computer, and the mount process 52 is performed by the special user on the login computer, so that the general user can access the file system. Access 54 to the file. However, in such a method, a general user who wants to use a specific file on a remote computer must request a special user. Moreover, in the case of a computer that is not allowed to mount, processing on the remote computer is also required. However, the remote computer will not be able to mount it if disclosure is not desirable due to confidentiality. In such a case, a login account is given only to a specific user so that the user can perform desired file operations by logging in to the computer.

[0003]

In the conventional method of logging in to a remote computer and manipulating a desired file, it is impossible to perform processing in cooperation with a local file system, and it is necessary to log in. There's a problem. An object of the present invention is to provide a window mount method by a user of a file system that can limit the level of visibility visible to a user having a login account for a computer of a file system to be mounted.

[0004]

The window mounting method by the user of the file system according to the present invention is a file system mount by the user of the file system which has a hierarchical structure and has clear access permission divisions such as owner and group. In the method, inside the kernel of the operating system, a user mount table that stores mount information for each user, a user management table,
Also, a server node having a mount point system node is provided at an arbitrary position inside the kernel or outside the kernel to handle a user's permission check and a file operation, and when the user makes a mount request, the server process is executed. To send a permission check request to the directory or file to be mounted, and determine whether or not there is access permission, and if it is determined to retain the permission, the user mount table and mount point system node can be accessed. The steps to set information such as different hierarchy levels, and when a user requests access to a file on the file system mounted by the above process, the mount destination is checked from the user mount table to determine the hierarchy level. Is in range A step of inspecting if was in the range, comprising the steps of transmitting an operation request of the file to the server process, and receiving a result of the server process is processed based on the request and returns.

[0005]

When the user makes a mount request, the file system sends an inspection request to the server process. At this time, the server process can request the transmission of the password or use the authentication mechanism in order to determine that the user is a genuine user, not a disguised user. If the access permission check result is received from the server process and it is determined that the access permission is retained, information such as the accessible hierarchy level is set in the user mount table in the kernel, and the list from the user management table is set. Connect to. The mount process is completed by setting information indicating that the mount point has been mounted on the system node. Next, when the user accesses the file mounted by the above mount processing, the kernel determines that it is mounted from the system node, and refers to the user mount table in the kernel to determine the mount destination. At this time, references from users other than the mounted user are not made to the mount destination, but are made to the hierarchy of the original file system. A file operation request is sent to the determined mount destination server process, and the server process performs an operation based on the request and returns the result data.

[0006]

Embodiments of the present invention will now be described with reference to the drawings.

FIG. 1 is a block diagram showing an embodiment of a window mount system by a user of the file system of the present invention. An example of applying this method between two computers connected via a network will be described below. The file system 2 of the login computer 1 to which the user is logged in has the function of checking the path name hierarchy level 3, the function of creating, deleting, and searching the user mount table list, in addition to the file input / output function. User mount table operation function
4 and request transmission function 5. On the other hand, a server process 7 exists on the remote computer 6 connected by network communication, and based on the request from the file system 2, the access right check 8 and the file access process 9 are performed using the existing file system 10. The result is returned to the file system 2 of the login computer 1. FIG. 2 shows a system processing procedure for executing a mount request from a user. The user can mount the directory or file, mount point, and
When a mount request is made by designating a limit level of the hierarchy (step 100), the file system 2 inquires of the server process 7 on the remote computer 6 whether the login account and the mount destination hierarchy have the access right ( Step 101). If necessary, the server process requests the password from the user and uses the authentication function to confirm that the user is a valid user. Then, the mount destination directory or file is checked for the access right, and the result is returned (step 102). Upon receiving the result, the file system 2 judges whether or not it has the access right (step 103). If it is accessible, the accessible mount level is set in the user mount table and the list is connected to the list from the user management table in the kernel (step 105). Further, mount information is set in the system node of the directory or file of the mount point (step 106), and the mount process ends. Only the user can see the window of the file system mounted by the user, and the state of the mounted file system cannot be seen by other users. The window once set is valid until the user notifies the end of use, or until it is determined that the remote computer 10 is down without returning a response within a fixed time. As a selection function, the system can automatically unmount user mounts that have not been accessed for a certain period of time, or limit the number of file systems 2 that users can mount. It is also possible for a special user or administrator to set up a file system window that is visible to all users. At this time, the process of publishing the directory or file on the remote computer 10 may be required. Furthermore, by limiting the file hierarchy level that can be specified, another visible and invisible control can be performed in addition to the access permission.

FIG. 3 is a conceptual diagram showing the file system hierarchy after completion of the mount processing. Remote computer
D, e, f, g, which are part of the file system on 31, are visible to users 35 on computer 32, below j. The x and y on the remote computer 31 are not visible to the user 35 of the computer 32. Moreover, users other than the user 35 on the computer 32 cannot see d, e, f, and g as the hierarchy under j. Figure 4
Shows the system processing procedure in the file access request from the user. When a user requests access to the mounted file, for example, name search, file data read / write, etc., is found by finding the system node of the mount point by a path name search process (step 111), it is judged whether the file system 2 is for a file within the hierarchy level (step 113), and if it is within the range, the remote computer is judged from the user mount table and processed by the server process. Send the request and wait for the result to arrive (step 114). When the server process receives the request, it performs processing according to the request and returns the result (step 115). The file system 2 receives the result from the server process and returns control to the user (step 116).

[0009]

As described above, in the window mounting method by the file system user of the present invention, the general user, not the special user, needs to open the file system to be mounted on the computer. Instead, it can only be mounted by holding permissions. Therefore, even if the file system in which the file exists is a remote computer, the same file operation as the file on the local computer can be performed without logging in. In addition, since the mount is effective for each user, access from other users can be avoided and the confidentiality of each computer can be maintained.

[Brief description of drawings]

FIG. 1 is a block diagram showing an example of a window mount system by a user of a file system of the present invention.

FIG. 2 is a flowchart showing an example of mount processing in a window mount method by a user of the file system according to the present embodiment.

FIG. 3 is an external view of a file space from a user after mounting in the window mounting method by the user of the file system according to the present embodiment.

FIG. 4 is a flowchart showing an example of file operation in a window mount method by a user of the file system of this embodiment.

FIG. 5 is a processing block diagram according to a conventional method.

[Explanation of symbols]

 1 Login Computer 2 File System 3 Path Name Hierarchical Level Check Function 4 User ound Table Operation Function 5 Request Transmission Function 6 Remote Computer 7 Server Process 8 Access Right Check 9 File Access Processing 10 Existing File System

Claims (1)

[Claims] 1. In a file system mount method by a user of a file system having a hierarchical structure and having clear access permission divisions such as owner and group, mount information for each user is stored in the kernel of the operating system. It is equipped with a user mount table, a user management table, and a mount point system node, and has a server process that handles user permission checks and file operations at any position inside or outside the kernel. If there is a mount request from a person, a step of transmitting an access permission check request for the directory or file to be mounted to the server process, determining whether there is access permission, and determining that the access permission is retained,
A step of setting information such as a hierarchy level accessible to the user mount table and mount point system node, and an access request from a user to a file on the file system mounted by the above processing. , Checking the mount destination from the user mount table to check whether the hierarchy level is within the range, if it is within the range, sending a file operation request to the server process, and the server process A window mounting method by a user of a file system, characterized by the step of processing according to a request and receiving a result to be returned.