Method and system for providing access to logical partition information on a per resource basis

• US 5,659,756 A
• Filed: 03/31/1995
• Issued: 08/19/1997
• Est. Priority Date: 03/31/1995
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hefferon, Eugene Paul, Paul, Rodney Allen, Kubala, Jeffrey Paul, Trotter, John Scott
• Primary Examiner(s): Harvey, Jack B.
• Assistant Examiner(s): WILEY, DAVID ARMAND
• Application Number:
  US08/414,088
• Time in Patent Office: 872 Days
• Field of Search: 395/600, 395/724
• US Class Current: 710/200
• CPC Class Codes: G06F 12/145 the protection being virtual, e.g. for virtual blocks or segments before a translation mechanism
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register

Abstract

An access method and system in a logically partitioned data processing system having a plurality of logical partitions. A requesting logical partition requests information pertaining to a resource of the data processing system as the resource relates to a requested logical partition of the system. The requesting logical partition is given access to the information when the requesting and requested logical partitions are authorized to access the resource. Thus, access to logical partition information is provided on a per resource basis. Additionally, access is limited such that the requesting logical partition can access information relating to less than all of the logical partitions of the logically partitioned data processing system.

Claims

1. An access method in a logically partitioned data processing system comprising a plurality of logical partitions, said access method comprising:

requesting access by a first logical partition of said plurality of logical partitions to information pertaining to a resource of said logically partitioned data processing system as said resource relates to a second logical partition of said plurality of logical partitions, each of said first logical partition and said second logical partition executing a system control program;

determining whether said first logical partition is authorized to access said information, wherein said determining, comprises establishing whether said first logical partition and said second logical partition have authority to access said resource; and

allowing said first logical partition to access said information when said determining indicates said first logical partition and said second logical partition have authority to access said resource.

2. The method of claim 1, wherein said requesting comprises issuing an instruction by said first logical partition requesting access to said information, said instruction comprising a resource identifier indicating said resource and a requested identifier specifying said second logical partition.

3. The method of claim 2, wherein said establishing comprises determining whether said requested identifier is specified on an authorization list for said resource, wherein said second logical partition has authority to access said resource when said requested identifier is specified.

4. The method of claim 3, wherein said first logical partition comprises a requesting identifier and said establishing further comprises determining whether said requesting identifier is specified on said authorization list, wherein said first logical partition has authority to access said resource when said requesting identifier is specified.

5. The method of claim 2, wherein said logically partitioned data processing system further comprises an input/output processor coupled to said plurality of logical partitions and one or more input/output devices coupled to said input/output processor, and wherein said instruction is executed by said input/output processor.

6. The method of claim 5, wherein said resource comprises a path between said input/output processor and one of said one or more input/output devices, and wherein said instruction returns to said first logical partition information regarding said path.

7. The method of claim 1, further comprising initially determining whether said first logical partition has authority to access partition information relating to any of said plurality of logical partitions other than its own logical partition.

8. The method of claim 7, further comprising denying access by said first logical partition to said information when said initially determining indicates said first logical partition does not have said authority.

9. An access method in a logically partitioned data processing system comprising at least three logical partitions, said access method comprising:

requesting access by a first logical partition of said at least three logical partitions to partition information relating to a second logical partition of said at least three logical partitions, each of said first and second logical partitions executing a system control program;

determining whether said first logical partition is authorized to access said partition information, said first logical partition having authority to access information for less than all of said at least three logical partitions in said logically partitioned data processing system; and

allowing said first logical partition to access said partition information when said determining indicates said first logical partition is authorized.

10. The access method of claim 9, wherein said requesting comprises requesting access to partition information pertaining to a resource of said logically partitioned data processing system, and wherein said determining comprises establishing whether said first logical partition and said second logical partition have authority to access said resource, wherein said first logical partition is authorized to access said partition information when said first logical partition and said second logical partition have authority to access said resource.

11. The method of claim 10, wherein said establishing comprises checking an authorization list for said resource to determine whether said first logical partition and said second logical partition are located on said authorization list.

12. The method of claim 10, wherein said requesting comprises issuing an instruction by said first logical partition requesting access to said partition information.

13. A logically partitioned data processing system comprising:

a plurality of logical partitions, a first logical partition of said plurality of logical partitions programmable to request access to information pertaining to a resource of said logically partitioned data processing system as said resource relates to a second logical partition of said plurality of logical partitions, wherein a system control program is executable by said first logical partition and said second logical partition; and

a processor coupled to said plurality of logical partitions, said processor programmable to determine whether said first logical partition is authorized to access said information and whether said first logical partition and said second logical partition have authority to access said resource, wherein said processor allows said first logical partition to access said information when said first logical partition and said second logical partition have authority to access said resource.

14. The logically partitioned data processing system of claim 13, wherein said first logical partition is further programmable to issue an instruction requesting access to said information, said instruction comprising a resource identifier indicating said resource and a requested identifier specifying said second logical partition.

15. The logically partitioned data processing system of claim 14, further comprising an authorization list for said resource, wherein said processor is further programmable to determine whether said requested identifier is specified on said authorization list, wherein said second logical partition has authority to access said resource when said requested identifier is specified.

16. The logically partitioned data processing system of claim 15, wherein said first logical partition comprises a requesting identifier, and wherein said processor is further programmable to determine whether said requesting identifier is specified on said authorization list, wherein said first logical partition has authority to access said resource when said requesting identifier is specified.

17. The logically partitioned data processing system of claim 16, further comprising one or more input/output devices coupled to said processor, wherein said processor is further programmable to execute said instruction, and wherein said resource comprises a path between said processor and one of said input/output devices, said instruction to return information regarding said path to said first logical partition.

18. The logically partitioned data processing system of claim 13, further comprising a hypervisor coupled to said plurality of logical partitions and said processor, said hypervisor programmable to initially determine whether said first logical partition has authority to access partition information relating to any of said plurality of logical partitions other than its own logical partition.

19. The logically partitioned data processing system of claim 18, wherein said hypervisor is further programmable to deny access to said information when said first logical partition does not have said authority.

20. A logically partitioned data processing system comprising:

at least three logical partitions, a first logical partition of said at least three logical partitions programmable to request access to partition information relating to a second logical partition of said at least three logical partitions, wherein a system control program is executable by said first logical partition and said second logical partition; and

a processor coupled to said at least three logical partitions, said processor programmable to determine whether said first logical partition is authorized to access said partition information, said first logical partition having authority to access information for less than all of said at least three logical partitions, wherein said processor allows said first logical partition to access said partition information when said first logical partition is authorized.

21. The logically partitioned data processing system of claim 20, wherein said first logical partition is further programmable to request access to partition information pertaining to a resource of said logically partitioned data processing system, and wherein said processor is further programmable to establish whether said first logical partition and said second logical partition have authority to access said resource, wherein said first logical partition is authorized to access said partition information when said first logical partition and said second logical partition have authority to access said resource.

22. The logically partitioned data processing system of claim 21, further comprising an authorization list for said resource, and wherein said processor is further programmable to determine whether said first logical partition and said second logical partition are located on said authorization list.

23. The logically partitioned data processing system of claim 20, wherein said first logical partition is further programmable to issue an instruction to request access to said partition information.

24. An access system in a logically partitioned data processing system comprising a plurality of logical partitions, said access system comprising:

means for requesting access by a first logical partition of said plurality of logical partitions to information pertaining to a resource of said logically partitioned data processing system as said resource relates to a second logical partition of said plurality of logical partitions, each of said first logical partition and said second logical partition executing a system control program;

means for determining whether said first logical partition is authorized to access said information, said determining means comprising means for establishing whether said first logical partition and said second logical partition have authority to access said resource; and

means for allowing said first logical partition to access said information when said determining means indicates said first logical partition and said second logical partition have authority to access said resource.

25. An access system in a logically partitioned data processing system comprising at least three logical partitions, said access system comprising:

means for requesting access by a first logical partition of said at least three logical partitions to partition information relating to a second logical partition of said at least three logical partitions, each of said first and second logical partitions executing a system control program;

means for determining whether said first logical partition is authorized to access said partition information, said first logical partition having authority to access information for less than all of said at least three logical partitions in said logically partitioned data processing system; and

means for allowing said first logical partition to access said partition information when said determining means indicates said first logical partition is authorized.

26. The access system of claim 25, wherein said requesting means comprises means for requesting access to partition information pertaining to a resource of said logically partitioned data processing system, and wherein said determining means comprises means for establishing whether said first logical partition and said second logical partition have authority to access said resource, wherein said first logical partition is authorized to access said partition information when said first logical partition and said second logical partition have authority to access said resource.