Data layer prioritization in an application layered system

• US 8,010,961 B1
• Filed: 01/03/2006
• Issued: 08/30/2011
• Est. Priority Date: 06/11/2003
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Blaser, Jared, Cook, Randall
• Primary Examiner(s): Bullock, Jr.; Lewis A
• Assistant Examiner(s): Wang; Jue
• Application Number:
  US11/324,375
• Time in Patent Office: 2,065 Days
• Field of Search: None
• US Class Current: 717/174
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines

Abstract

The inventions relate generally to layered computing systems that provide public access to the content of the layers. Also disclosed herein are prioritization schemes usable in a layered computing system, including prioritization by layer type, by assigned priority weights, by access type, by sub-layers and by read-write indicators. Processes may further be associated to layers from which they originate, and priority given to associated layers thereby. Association may also be provided for installer services, thereby depositing an applications updates into its layer. Layers may also contain file reference information including exclusion or inclusion entries indicating what files may be written thereto. Paths recorded in layers may also embed variables to true paths on a layered system. Detailed information on various example embodiments of the inventions are provided in the Detailed Description below, and the inventions are defined by the appended claims.

Claims

1. A layered computing system discriminating a priority among a plurality of enabled layers of different types located on storage of the system, the types of layers recognized by the system including an application layer type and a data layer type, and wherein layers identified as data layers carry file reference information determining which files may be written therein, said system comprising:

a processor;

data and program storage accessible by said processor, said storage comprising one or more data storage devices;

an operating system stored to said storage;

computer readable instructions located to said program storage, wherein said instructions are configured to be executed by said processor to perform the functions of;

(i) receiving from an application a request to perform a file operation, that request containing a file reference appropriate to a file system,

(ii) identifying a set of enabled layers,

(iii) determining a priority for searching the enabled layers and a base filesystem,

(iv) performing a search for the file object corresponding to the file reference, the search performed in order of the determined priority,

(v) when, in performing the search for a non-write request, a file object having priority is found corresponding to the file reference in a layer, returning a virtual file handle to that virtual file object,

(vi) when, in performing the search, a file object is not found corresponding to the file reference, and when the request was not a write request, returning a result indicating that no file object corresponding to the file reference can be accessed,

(vii) for a write request;

(a) reading the file reference information carried with a data layer;

(b) comparing the file reference requested against the file reference information of a data layer; and

(c) when, while performing the search, a data layer is encountered with file reference information permitting writing of the requested file reference to that data layer, finding a virtual file object in that data layer and returning a virtual file handle to that virtual file object, wherein

a data layer containing inclusion or exclusion entries that determine which files may be written therein is prioritized before any read-write application layers or sublayers to capture certain files and avoid deposition into the application layers.

2. A layered computing system according to claim 1, wherein a layer specifies where the layer fits within a priority scheme for searching the enabled layers and a base filesystem.

3. A layered computing system according to claim 1, wherein a layer carries information that instructs the layered computing system to prioritize the layer before or after other identified layers or base filesystems.

4. A layered computing system according to claim 1, wherein layers included within the enabled layers carry priority weights relative to other layers or base filesystems.

5. A layered computing system according to claim 4, wherein the priority weights are numeric values.

6. A set of non-transitory computer readable media containing computer instructions for discriminating a priority among a plurality of enabled layers of different types located on storage accessible by a layered computing system, the types of layers recognized by the system including an application layer type and a data layer type, and wherein layers identified as data layers carry file reference information determining which files may be written therein, the set of computer readable media comprising at least one medium upon which is stored the computer instructions executable by a computing system to achieve the functions of:

(i) receiving from an application a request to perform a file operation, that request containing a file reference appropriate to a file system,

(ii) identifying a set of enabled layers,

(iii) determining a priority for searching the enabled layers and a base filesystem,

(iv) performing a search for the file object corresponding to the file reference, the search performed in order of the determined priority,

(v) when, in performing the search for a non-write request, a file object having priority is found corresponding to the file reference in a layer, returning a virtual file handle to that virtual file object,

(vi) when, in performing the search, a file object is not found corresponding to the file reference, and when the request was not a write request, returning a result indicating that no file object corresponding to the file reference can be accessed,

(vii) for a write request;

(a) reading the file reference information carried with a data layer,

(b) comparing the file reference requested against the file reference information of a data layer, and

(c) when, while performing the search a data layer is encountered with file reference information permitting writing of the requested file reference to that data layer, finding a virtual file object in that data layer and returning a virtual file handle to that virtual file object, wherein

a data layer containing inclusion or exclusion entries that determine which files may be written therein is prioritized before any read-write application layers or sublayers to capture certain files and avoid deposition into the application layers.

7. A set of non-transitory computer readable media according to claim 6, wherein the file reference information of a data layer contains exclusion entries indicating that certain files are not to be written to the data layer, and wherein for write requests said instructions are further configured to perform the functions of:

(viii) reading the file exclusion entries of an enabled data layer;

(ix) for requested file write operations, comparing the file reference against the file exclusion entries of a data layer;

(x) disallowing a finding of a virtual file object in a data layer containing a file exclusion entry corresponding to the file reference of a requested file write operation.

8. A set of non-transitory computer readable media according to claim 7, wherein an exclusion entry contains a file type or extension, and wherein said instructions are further configured to disallow a finding of a virtual file object in a data layer containing a file exclusion entry corresponding to the type of file of a requested file write operation.

9. A set of non-transitory computer readable media according to claim 7, wherein an exclusion entry contains a directory specification, and wherein said instructions are further configured to disallow a finding of a virtual file object in a data layer containing a file exclusion entry corresponding to the directory of the file reference of a requested file write operation.

10. A set of non-transitory computer readable media according to claim 6, wherein an inclusion or exclusion entry is defined for a path.

11. A set of non-transitory computer readable media according to claim 6, wherein

exclusion entries for user file types and directories are included within file reference information carried with an application layer.

12. A set of non-transitory computer readable media according to claim 6, wherein the file reference information of a data layer contains inclusion entries indicating that certain files are to be written to the data layer, and wherein for write requests said instructions are further configured to perform the functions of:

(viii) reading the file inclusion entries of an enabled data layer;

(ix) reading requested file write operations, comparing the file reference against the file inclusion entries of a data layer;

(x) allowing a finding of a virtual file object in a data layer containing a file inclusion entry corresponding to the file reference of a requested file write operation.

13. A set of non-transitory computer readable media according to claim 6, wherein said instructions are further configured to operate a layer manager application that can receive layers from a network host, and command enablement, disablement and importation of layers so that, upon enabling, a layer overlays its contents to the base filesystem and, upon disabling, contents of a layer no longer appear to processes of the operating system.

14. A method of discriminating a priority among a plurality of enabled layers of different types located on storage accessible by a layered computing system, the types of layers recognized by the system including an application layer type and a data layer type, and wherein layers identified as data layers carry file reference information determining which files may be written therein, the method comprising the steps of:

receiving from an application a request to perform a file operation, that request containing a file reference appropriate to a file system;

identifying a set of enabled layers;

determining a priority for searching the enabled layers and a base filesystem;

performing a search for the file object corresponding to the file reference, the search performed in order of the determined priority;

when, in performing the search for a non-write request, a file object having priority is found corresponding to the file reference in a layer, returning a virtual file handle to that virtual file object;

when, in performing the search, a file object is not found corresponding to the file reference, and when the request was not a write request, returning a result indicating that no file object corresponding to the file reference can be accessed;

for a write request;

(a) reading the file reference information carried with a data layer;

(b) comparing the file reference requested against the file reference information of a data layer; and

(c) when, while performing the search, a data layer is encountered with file reference information permitting writing of the requested file reference to that data layer, finding a virtual file object in that data layer and returning a virtual file handle to that virtual file object, wherein

the search order for non-write requests is different than for write requests.

15. A method according to claim 14 wherein the file reference information of a data layer contains exclusion entries indicating that certain files are not to be written to the data layer, said method further comprising the steps of:

reading the file exclusion entries of an enabled data layer;

for requested file write operations, comparing the file reference against the file exclusion entries of a data layer;

disallowing a finding of a virtual file object in a data layer containing a file exclusion entry corresponding to the file reference of a requested file write operation.

16. A method according to claim 15 wherein an exclusion entry contains a file type or extension, and wherein the finding of a virtual file object in a data layer containing a file exclusion entry corresponding to the type of file of a requested file write operation is disallowed.

17. A method according to claim 15 wherein an exclusion entry contains a directory specification, and wherein the finding of a virtual file object in a data layer containing a file exclusion entry corresponding to the directory of the file reference of a requested file write operation is disallowed.

18. A method according to claim 14, wherein a layer identified as a data layer is prioritized after any read-write application layers or sublayers to catch files not written to other layers.

19. A method according to claim 14, wherein a data layer containing inclusion or exclusion entries is prioritized before any read-write application layers or sublayers to capture certain files and avoid deposition into the application layers.

20. A method according to claim 14, wherein the file reference information of a data layer contains inclusion entries indicating that certain files are to be written to the data layer, and wherein said method further comprises the steps of:

reading the file inclusion entries of an enabled data layer;

for requested file write operations, comparing the file reference against the file inclusion entries of a data layer;

allowing a finding of a virtual file object in a data layer containing a file inclusion entry corresponding to the file reference of a requested file write operation, wherein finding the virtual file object in the data layer comprises creating a file reference structure in the data layer, the virtual file object comprising the file reference structure.