Reducing read operations and branches in file system policy checks
First Claim
1. A computer-implemented method for identifying a set of files, conforming to a policy, the method comprising:
- receiving, by at least one processor, a first request to determine files, included in a first snapshot of a file system that conform to a first policy attribute, wherein the first policy attribute is included in an input policy, wherein the first request includes a request to determine files included in the first snapshot of the file system that conform to a second policy attribute, and wherein the second policy attribute is included in the input policy;
determining, by the at least one processor, in response to the first request, that policy output information for the first policy attribute is not saved in a storage device;
identifying, by the at least one processor, in response to determining that policy output information for the first policy attribute is not saved in the storage device, a first subset of files, included in the first snapshot of the file system, that conform to the first policy attribute;
identifying, by the at least one processor, in response to the first request a third subset of files, included in the first snapshot of the file system, that conform to the second policy attribute, wherein the first subset of files conform to the first policy attribute based on respective file type attributes of files in the first subset of files matching a first file type, and wherein the third subset of files conform to the second policy attribute based on respective modification date attributes of the third subset of files being greater than a first date;
saving, by the at least one processor, first policy output information descriptive of the first subset of files, and third policy output information comprising information descriptive of files included in the third subset of files;
receiving, by the at least one processor, a subsequent request to determine files, included in a subsequent snapshot of the file system, that conform to the first policy attribute;
determining, by the at least one processor, based on the first policy output information, a difference set comprising files included in the subsequent snapshot that are not included in the first snapshot;
identifying, by the at least one processor, a second subset of files, included in the difference set, that conform to the first policy attribute;
generating second policy output information descriptive of files included in the second subset of files; and
outputting, by the at least one processor, the first policy output information merged with the second policy output information.
1 Assignment
0 Petitions
Accused Products
Abstract
A method to identify data elements conforming to a policy includes receiving a request to identify data elements in an input set of data elements that conform to one or more requested policies. According to the method, policy output information describing data elements that conform to a requested policy are saved in association with the requested policy. In response to receiving a subsequent request to identify data elements in a subsequent set of data elements that conform to the requested policy, the method includes outputting the saved policy output information based on the policy output information having been saved in association with the requested policy. A computer program product and a system, configured with processors and a memory that can store saved policy information, can implement the method.
7 Citations
14 Claims
-
1. A computer-implemented method for identifying a set of files, conforming to a policy, the method comprising:
-
receiving, by at least one processor, a first request to determine files, included in a first snapshot of a file system that conform to a first policy attribute, wherein the first policy attribute is included in an input policy, wherein the first request includes a request to determine files included in the first snapshot of the file system that conform to a second policy attribute, and wherein the second policy attribute is included in the input policy; determining, by the at least one processor, in response to the first request, that policy output information for the first policy attribute is not saved in a storage device; identifying, by the at least one processor, in response to determining that policy output information for the first policy attribute is not saved in the storage device, a first subset of files, included in the first snapshot of the file system, that conform to the first policy attribute; identifying, by the at least one processor, in response to the first request a third subset of files, included in the first snapshot of the file system, that conform to the second policy attribute, wherein the first subset of files conform to the first policy attribute based on respective file type attributes of files in the first subset of files matching a first file type, and wherein the third subset of files conform to the second policy attribute based on respective modification date attributes of the third subset of files being greater than a first date; saving, by the at least one processor, first policy output information descriptive of the first subset of files, and third policy output information comprising information descriptive of files included in the third subset of files; receiving, by the at least one processor, a subsequent request to determine files, included in a subsequent snapshot of the file system, that conform to the first policy attribute; determining, by the at least one processor, based on the first policy output information, a difference set comprising files included in the subsequent snapshot that are not included in the first snapshot; identifying, by the at least one processor, a second subset of files, included in the difference set, that conform to the first policy attribute; generating second policy output information descriptive of files included in the second subset of files; and outputting, by the at least one processor, the first policy output information merged with the second policy output information. - View Dependent Claims (2, 3, 4, 5)
-
-
6. A computer program product for identifying a set of files conforming to a policy, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by an at least one processor to cause the at least one processor to:
-
receive a first request to determine files, included in a first snapshot of a file system that conform to a first policy attribute, wherein the first policy attribute is included in an input policy wherein the first request includes a request to determine files included in the first snapshot of the file system that conform to a second policy attribute, and wherein the second policy attribute is included in the input policy; determine, in response to the first request, that policy output information for the first policy attribute is not saved in a storage device; identify, in response to determining that policy output information for the first policy attribute is not saved in the storage device, a first subset of files, included in the first snapshot of the file system, that conform to the first policy attribute; identify, by the at least one processor, in response to the first request a third subset of files, included in the first snapshot of the file system, that conform to the second policy attribute, wherein the first subset of files conform to the first policy attribute based on respective file type attributes of files in the first subset of files matching a first file type, and wherein the third subset of files conform to the second policy attribute based on respective modification date attributes of the third subset of files being greater than a first date; save first policy output information descriptive of the first subset of files, and third policy output information comprising information descriptive of files included in the third subset of files; receive a subsequent request to determine files, included in a subsequent snapshot of the file system, that conform to the first policy attribute; determine, based on the first policy output information, a difference set comprising files included in the subsequent snapshot that are not included in the first snapshot; identify a second subset of files, included in the difference set, that conform to the first policy attribute; generate second policy output information descriptive of files included in the second subset of files; and output, the first policy output information merged with the second policy output information. - View Dependent Claims (7, 8, 9, 10)
-
-
11. A computing system for identifying a set of files conforming to a policy, the computing system comprising:
-
a memory configured to store policy output information; and at least one processor coupled to the memory, wherein the at least one processor is configured to; receive a first request to determine files, included in a first snapshot of a file system that conform to a first policy attribute, wherein the first policy attribute is included in an input policy, wherein the first request includes a request to determine files included in the first snapshot of the file system that conform to a second policy attribute, and wherein the second policy attribute is included in the input policy; determine, in response to the first request, that policy output information for the first policy attribute is not saved in a storage device; identify, in response to determining that policy output information for the first policy attribute is not saved in the storage device, a first subset of files, included in the first snapshot of the file system, that conform to the first policy attribute; identify, by the at least one processor, in response to the first request a third subset of files, included in the first snapshot of the file system, that conform to the second policy attribute, wherein the first subset of files conform to the first policy attribute based on respective file type attributes of files in the first subset of files matching a first file type, and wherein the third subset of files conform to the second policy attribute based on respective modification date attributes of the third subset of files being greater than a first date; save first policy output information descriptive of the first subset of files, and third policy output information comprising information descriptive of files included in the third subset of files; receive a subsequent request to determine files, included in a subsequent snapshot of the file system, that conform to the first policy attribute; determine, based on the first policy output information, a difference set comprising files included in the subsequent snapshot that are not included in the first snapshot; identify a second subset of files, included in the difference set, that conform to the first policy attribute; generate second policy output information descriptive of files included in the second subset of files; and output, the first policy output information merged with the second policy output information. - View Dependent Claims (12, 13, 14)
-
Specification