Fine grain privileges in an operating system

Abstract

In one embodiment, the present invention provides techniques for managing activities of processes using a fine grained privilege model in an operating system environment partitioned into a global zone and one or more non-global zones for isolating processes from processes executing in association with other non-global zones under control of a single operating kernel instance.

Description

[0001] claim priority [0002] This application claims priority to Andrew G. Tucker, et al., Provisional Application No. 60 / 469558, filed May 9, 2003, entitled "OPERATING SYSTEM VIRTUALIZATION," which is hereby incorporated by reference in its entirety The content is equivalent to set forth herein in its entirety. Background technique [0003] Currently, many computing systems include computing resources that are not fully utilized. This underutilization presents a potential opportunity for owners of these systems to obtain greater capacity or reduce costs by increasing the utilization of these computing resources. [0004] A number of approaches can be used to address the problem of increased utilization, including the consolidation of multiple applications on a single hardware platform. Consolidation approaches typically attempt to support the coexistence of multiple applications on a single hardware unit in order to achieve greater functionality on fewer hardware platform...

AI Technical Summary

Problems solved by technology

Also, the second process cannot "join" the jail

Images