基于系统调用替换的Linux系统安全性设计与分析

Design and Analysis of the Safety of Linux System Based on System Call Replacing

本文为了提高Linux系统的安全性,提出一种替换系统调用的方法。在分析特权命令和系统属性的基础上,提出了两种系统调用方法。用替换后的系统调用函数,监控特权命令的使用,并进行了测试实验。测试结果说明了本文所提出的方法可以有效防止不法用户通过获取到root口令而破坏系统重要文件。

In order to enhance the safety of Linux system,a method of system call replacing is proposed.By analyzing the prerogative command and system attribute two system call replacing methods are proposed.Using the replaced system call functions,the prerogative command is supervised.The test result shows that using the method proposed in this paper can avoid the illegal user destroy the system by getting root command.