-
21.
公开(公告)号:US20090313677A1
公开(公告)日:2009-12-17
申请号:US12137767
申请日:2008-06-12
IPC分类号: G06F21/00
CPC分类号: G06F21/6218 , G06F21/604
摘要: A process, apparatus and program product create a new role in a Role Based Access Control (RBAC) system by using mathematical operators with either one or more authorizations, or one or more existing roles, or a combination thereof.
摘要翻译: 过程,设备和程序产品通过使用具有一个或多个授权或一个或多个现有角色的数学运算符或其组合在基于角色的访问控制(RBAC)系统中创建新角色。
-
公开(公告)号:US09201875B2
公开(公告)日:2015-12-01
申请号:US13452867
申请日:2012-04-21
CPC分类号: G06F17/30 , G06F9/5077 , G06F11/1453 , G06F17/3015
摘要: A virtual machine of an information handling system (IHS) initializes an operating system to provide partition file system memory management during application execution. The operating system employs multiple partitions that include one or more applications for execution within the virtual machine. A file system tool identifies write operations to a global file system and generates local and common file system information. The file system tool populates the local file systems that include delta local file systems and differential file systems with write operation data. The file system tool may generate stackable common delta file system information to store write operation data common to two or more partitions that employ executing applications. The file system tool may combine or separate stackable common delta file system information to provide improvements in virtual machine memory utilization.
-
公开(公告)号:US08392913B2
公开(公告)日:2013-03-05
申请号:US12057785
申请日:2008-03-28
CPC分类号: G06F9/4843 , G06F9/45512
摘要: The present invention provides a computer implemented method and apparatus for a built-in function of a shell to execute in a thread of an interactive shell process. The data processing system receives a request to execute the built-in function. The data processing system determines that the request includes a thread creating indicator. The data processing system schedules a thread to execute the built-in function, in response to a determination that the request includes the thread creating indicator, wherein the thread is controlled by the interactive shell process and shares an environment of the interactive shell process. The data processing system declares a variable based on at least one instruction of the built-in function. Finally, the data processing system may access the variable.
摘要翻译: 本发明提供了一种用于壳体的内置功能以在交互式shell进程的线程中执行的计算机实现的方法和装置。 数据处理系统接收执行内置功能的请求。 数据处理系统确定请求包括线程创建指示符。 响应于确定所述请求包括线程创建指示符,数据处理系统调度线程以执行内置功能,其中线程由交互式shell进程控制并共享交互式shell进程的环境。 数据处理系统根据内置函数的至少一个指令声明一个变量。 最后,数据处理系统可以访问变量。
-
公开(公告)号:US20120158803A1
公开(公告)日:2012-06-21
申请号:US12973411
申请日:2010-12-20
IPC分类号: G06F17/30
CPC分类号: G06F17/30 , G06F9/5077 , G06F11/1453 , G06F17/3015
摘要: A virtual machine of an information handling system (IHS) initializes an operating system to provide partition file system memory management during application execution. The operating system employs multiple partitions that include one or more applications for execution within the virtual machine. A file system tool identifies write operations to a global file system and generates local and common file system information. The file system tool populates the local file systems that include delta local file systems and differential file systems with write operation data. The file system tool may generate stackable common delta file system information to store write operation data common to two or more partitions that employ executing applications. The file system tool may combine or separate stackable common delta file system information to provide improvements in virtual machine memory utilization.
-
公开(公告)号:US20120151552A1
公开(公告)日:2012-06-14
申请号:US12964765
申请日:2010-12-10
IPC分类号: G06F21/00
CPC分类号: G06F21/6281 , G06F9/468
摘要: A technique for performing domain-based access control for granular isolation on a data processing system includes assigning, using the data processing system, one or more first domain tags to a dynamic object that is created by a first process that is executing on the data processing system. The technique also includes assigning, using the data processing system, one or more second domain tags to a second process that is executing on the data processing system. The first and second domain tags are evaluated, using the data processing system, according to one or more enforced rules to determine whether to grant or deny the second process access to data associated with the dynamic object.
摘要翻译: 用于对数据处理系统上的粒度隔离执行基于域的访问控制的技术包括使用数据处理系统将一个或多个第一域标签分配给由在数据处理上执行的第一进程创建的动态对象 系统。 该技术还包括使用数据处理系统将一个或多个第二域标签分配给正在数据处理系统上执行的第二进程。 使用数据处理系统根据一个或多个强制规则评估第一和第二域标签,以确定是否授予或拒绝对与动态对象相关联的数据的第二过程访问。
-
公开(公告)号:US20090249344A1
公开(公告)日:2009-10-01
申请号:US12057785
申请日:2008-03-28
IPC分类号: G06F9/46
CPC分类号: G06F9/4843 , G06F9/45512
摘要: The present invention provides a computer implemented method and apparatus for a built-in function of a shell to execute in a thread of an interactive shell process. The data processing system receives a request to execute the built-in function. The data processing system determines that the request includes a thread creating indicator. The data processing system schedules a thread to execute the built-in function, in response to a determination that the request includes the thread creating indicator, wherein the thread is controlled by the interactive shell process and shares an environment of the interactive shell process. The data processing system declares a variable based on at least one instruction of the built-in function. Finally, the data processing system may access the variable.
摘要翻译: 本发明提供了一种用于壳体的内置功能以在交互式shell进程的线程中执行的计算机实现的方法和装置。 数据处理系统接收执行内置功能的请求。 数据处理系统确定请求包括线程创建指示符。 响应于确定所述请求包括线程创建指示符,数据处理系统调度线程以执行内置功能,其中线程由交互式shell进程控制并共享交互式shell进程的环境。 数据处理系统根据内置函数的至少一个指令声明一个变量。 最后,数据处理系统可以访问变量。
-
公开(公告)号:US09218343B2
公开(公告)日:2015-12-22
申请号:US12973411
申请日:2010-12-20
CPC分类号: G06F17/30 , G06F9/5077 , G06F11/1453 , G06F17/3015
摘要: A virtual machine of an information handling system (IHS) initializes an operating system to provide partition file system memory management during application execution. The operating system employs multiple partitions that include one or more applications for execution within the virtual machine. A file system tool identifies write operations to a global file system and generates local and common file system information. The file system tool populates the local file systems that include delta local file systems and differential file systems with write operation data. The file system tool may generate stackable common delta file system information to store write operation data common to two or more partitions that employ executing applications. The file system tool may combine or separate stackable common delta file system information to provide improvements in virtual machine memory utilization.
摘要翻译: 信息处理系统(IHS)的虚拟机初始化操作系统以在应用执行期间提供分区文件系统存储器管理。 操作系统采用多个分区,其中包括一个或多个应用程序以在虚拟机内执行。 文件系统工具识别对全局文件系统的写入操作,并生成本地和公共文件系统信息。 文件系统工具填充本地文件系统,其中包括具有写入操作数据的增量本地文件系统和差异文件系统。 文件系统工具可以生成可堆叠的公共增量文件系统信息,以存储与使用执行应用程序的两个或更多个分区相同的写入操作数据。 文件系统工具可以组合或分离可堆叠的公共增量文件系统信息,以提供虚拟机内存利用率的改进。
-
公开(公告)号:US08819766B2
公开(公告)日:2014-08-26
申请号:US12964765
申请日:2010-12-10
IPC分类号: G06F21/00
CPC分类号: G06F21/6281 , G06F9/468
摘要: A technique for performing domain-based access control for granular isolation on a data processing system includes assigning, using the data processing system, one or more first domain tags to a dynamic object that is created by a first process that is executing on the data processing system. The technique also includes assigning, using the data processing system, one or more second domain tags to a second process that is executing on the data processing system. The first and second domain tags are evaluated, using the data processing system, according to one or more enforced rules to determine whether to grant or deny the second process access to data associated with the dynamic object.
摘要翻译: 用于对数据处理系统上的粒度隔离执行基于域的访问控制的技术包括使用数据处理系统将一个或多个第一域标签分配给由在数据处理上执行的第一进程创建的动态对象 系统。 该技术还包括使用数据处理系统将一个或多个第二域标签分配给正在数据处理系统上执行的第二进程。 使用数据处理系统根据一个或多个强制规则评估第一和第二域标签,以确定是否授予或拒绝对与动态对象相关联的数据的第二过程访问。
-
公开(公告)号:US20120209894A1
公开(公告)日:2012-08-16
申请号:US13452867
申请日:2012-04-21
IPC分类号: G06F17/30
CPC分类号: G06F17/30 , G06F9/5077 , G06F11/1453 , G06F17/3015
摘要: A virtual machine of an information handling system (IHS) initializes an operating system to provide partition file system memory management during application execution. The operating system employs multiple partitions that include one or more applications for execution within the virtual machine. A file system tool identifies write operations to a global file system and generates local and common file system information. The file system tool populates the local file systems that include delta local file systems and differential file systems with write operation data. The file system tool may generate stackable common delta file system information to store write operation data common to two or more partitions that employ executing applications. The file system tool may combine or separate stackable common delta file system information to provide improvements in virtual machine memory utilization.
摘要翻译: 信息处理系统(IHS)的虚拟机初始化操作系统以在应用执行期间提供分区文件系统存储器管理。 操作系统采用多个分区,其中包括一个或多个应用程序以在虚拟机内执行。 文件系统工具识别对全局文件系统的写入操作,并生成本地和公共文件系统信息。 文件系统工具填充本地文件系统,其中包括具有写入操作数据的增量本地文件系统和差异文件系统。 文件系统工具可以生成可堆叠的公共增量文件系统信息,以存储与使用执行应用程序的两个或更多个分区相同的写入操作数据。 文件系统工具可以组合或分离可堆叠的公共增量文件系统信息,以提供虚拟机内存利用率的改进。
-
30.
公开(公告)号:US08117643B2
公开(公告)日:2012-02-14
申请号:US12137767
申请日:2008-06-12
IPC分类号: G06F7/04
CPC分类号: G06F21/6218 , G06F21/604
摘要: A process, apparatus and program product create a new role in a Role Based Access Control (RBAC) system by using mathematical operators with either one or more authorizations, or one or more existing roles, or a combination thereof.
摘要翻译: 过程,设备和程序产品通过使用具有一个或多个授权或一个或多个现有角色的数学运算符或其组合在基于角色的访问控制(RBAC)系统中创建新角色。
-
-
-
-
-
-
-
-
-