METHOD AND SYSTEM FOR IMPLEMENTING A MULTILEVEL FILE SYSTEM IN A VIRTUALIZED ENVIRONMENT
First Claim
1. A system, comprising:
- a processor;
a host operating system (OS) configured to execute on the processor, wherein the host OS comprises;
a global zone comprising a multilevel filesystem (MLFS) mounted in the global zone, wherein the MLFS is associated with a label range, wherein the MLFS comprises a first plurality of files and a first plurality of directories, wherein each of the first plurality of files is associated with its own label and wherein each of the first plurality of directories is associated with its own label; and
a first non-global zone, wherein the MLFS is mounted in the first non-global zone as a first loopback file system,wherein the host OS is configured to;
receive, from a process executing on the host OS, a request to access a first file of the plurality of files in the MLFS,obtain a process label associated with the process,obtain a first file label associated with the first file,make a first determination that the process label dominates the first file label,based on the first determination, make a second determination that the first file label is equal to the process label, andin response to the second determination, provide read and write access to the first file.
1 Assignment
0 Petitions
Accused Products
Abstract
A global zone executing on a host OS that includes a multilevel filesystem (MLFS) associated with a label range, where the MLFS includes files and directories, where each of the files is associated with its own label and where each of the directories is associated with its own label. The global zone further includes a first non-global zone, where the MLFS is mounted in the first non-global zone as a first loopback file system. The host OS is configured to receive, from a process executing on the host OS, a request to access a first file in the MLFS, make a first determination that a process label dominates a first file label, based on the first determination, make a second determination that the first file label is equal to the process label, and in response to the second determination, provide read and write access to the first file.
28 Citations
20 Claims
-
1. A system, comprising:
-
a processor; a host operating system (OS) configured to execute on the processor, wherein the host OS comprises; a global zone comprising a multilevel filesystem (MLFS) mounted in the global zone, wherein the MLFS is associated with a label range, wherein the MLFS comprises a first plurality of files and a first plurality of directories, wherein each of the first plurality of files is associated with its own label and wherein each of the first plurality of directories is associated with its own label; and a first non-global zone, wherein the MLFS is mounted in the first non-global zone as a first loopback file system, wherein the host OS is configured to; receive, from a process executing on the host OS, a request to access a first file of the plurality of files in the MLFS, obtain a process label associated with the process, obtain a first file label associated with the first file, make a first determination that the process label dominates the first file label, based on the first determination, make a second determination that the first file label is equal to the process label, and in response to the second determination, provide read and write access to the first file. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18)
-
-
19. A system, comprising:
-
a first computer comprising; a processor; a host operating system (OS) configured to execute on the processor, wherein the host OS comprises; a global zone comprising a multilevel filesystem (MLFS) mounted in the global zone, wherein the MLFS is associated with a label range, wherein the MLFS comprises a first plurality of files and a first plurality of directories, wherein each of the first plurality of files is associated with its own label and wherein each of the first plurality of directories is associated with its own label; and a second computer separate from the first computer, wherein the second computer includes an interface to the MLFS; wherein the host OS is configured to; receive, from a process executing on second computer, a request to access a first file of the plurality of files in the MLFS, obtain a process label associated with the process, obtain a first file label associated with the first file, make a first determination that the process label dominates the first file label, based on the first determination, make a second determination that the first file label is equal to the process label, and in response to the second determination, provide read and write access to the first file. - View Dependent Claims (20)
-
Specification