Systems and methods for building software packages in secure development environments

• US 8,615,737 B2
• Filed: 12/23/2010
• Issued: 12/24/2013
• Est. Priority Date: 12/23/2010
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Walsh, Daniel J., Greguske, Jason
• Primary Examiner(s): Dao, Thuy
• Assistant Examiner(s): Wang, Ben C
• Application Number:
  US12/977,704
• Publication Number:
  US 20120167048A1
• Time in Patent Office: 1,097 Days
• Field of Search: None
• US Class Current: 717/120
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 8/71 Version control security arrangements therefor G06F21/57; Configuration management
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/103 Workflow collaboration or project management

Abstract

The mock tool can be configured to create a mock execution environment for building software packages. The mock execution environment is isolated from resources of the computing system supporting the mock execution environment and other mock execution environments. Further, the mock execution environment can be created to simulate disabling on any features of the operating system supporting the mock execution environment that could cause problems in the building the software packages.

Claims

1. A method comprising:

receiving a request to build a software package, wherein the request comprises specifications of the software package;

creating, by a processor, a development environment in a computing system, wherein the development environment has limited access to resources of the computing system;

creating and mounting a system file in the development environment, the system file to simulate disabling of features of an operating system of the computing system that conflict with the software package;

selecting, by the processor, a security label for the development environment, wherein the security label prevents the development environment from accessing other development environments executing on the computing system;

copying files to the development environment based on the specifications; and

building in the development environment, the software package utilizing the files.

2. The method of claim 1, wherein selecting the security label comprises randomly selecting the security label.

3. The method of claim 1, wherein creating the system file comprises:

removing statements that reference features of an existing system file of the operating system.

4. The method of claim 1, further comprising storing the software package in the computing system.

5. The method of claim 1, wherein the resources comprise hardware resources of the computing system and software resources of the computing system.

6. A non-transitory computer readable medium comprising instructions for causing a processor to perform operations comprising:

receiving, at the processor, a request to build a software package, wherein the request comprises specifications of the software package;

creating, by the processor, a development environment in a computing system, wherein the development environment has limited access to resources of the computing system;

creating and mounting a system file in the development environment, the system file to simulate disabling of features of an operating system of the computing system that conflict with the software package;

selecting, by the processor, a security label for the development environment, wherein the security label prevents the development environment from accessing other development environments executing on the computing system;

copying files to the development environment based on the specifications; and

building, in the development environment, the software package utilizing the files.

7. The non-transitory computer readable medium of claim 6, wherein selecting the security label comprises randomly selecting the security label.

8. The non-transitory computer readable medium of claim 6, wherein creating the system file comprises removing statements that reference features of an existing system file of the operating system.

9. The non-transitory computer readable medium of claim 6, further comprising storing the software package in the computing system.

10. The non-transitory computer readable medium of claim 6, wherein the resources comprise hardware resources of the computing system and software resources of the computing system.

11. A system comprising:

a memory comprising instructions; and

a processor coupled to the memory, the processor to execute the instructions to perform operations comprising;

receiving a request to build a software package, wherein the request comprises specifications of the software package;

creating a development environment in a computing system, wherein the development environment has limited access to resources of the computing system;

creating and mounting a system file in the development environment, the system file to simulate disabling of features of an operating system of the computing system that conflict with the software package;

selecting a security label for the development environment, wherein the security label prevents the development environment from accessing other development environments executing on the computing system;

copying files to the development environment based on the specifications; and

building, in the development environment, the software package utilizing the files.

12. The system of claim 11, wherein selecting the security label comprises randomly selecting the security label.

13. The system of claim 11, wherein creating the system file comprises:

removing statements that reference features of an existing system file of the operating system.

14. The system of claim 11, further comprising storing the software package in the computing system.