| 摘要 |
PURPOSE: A method for controlling system call and changing dynamic kernel of a unix operating system are provided to control all accesses of a user with respect to a system resource through a user access control as the unit of a system call by using a technique intercepting a system call. CONSTITUTION: A user process of user area requests a system call(201). Thus, information of a system call vector table of a kernel area is searched(202). It is judged whether the requested system call is a system to be intercepted(203). If the requested system call is not a system to be intercepted, a circle-shaped system call is performed(204). If the requested system call is a system to be intercepted, the call is separated into a replacing system call processor of an interrupt engine, and the replacing system call processor extracts information with respect to a user requested the system call, a process and a system resource(205). Thus, the replacing system call processor transmits the extracted information to database through a communication interface and requests an access right information of the user(206). The database obtains the user's access right information with respect to a system resource by searching data and provides the result to the replacing system call processor(207). Thus, the replacing system call processor decides user's accessing right by receiving information(208). If user's accessing right with respect to the system resource does not exist, a process denying of a system call is informed to the user process(209).
|
