Patent ID: 11886605
Assignee: RED HAT, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 17:
18. A system comprising:
a non-transitory memory; and
one or more hardware processors coupled to the non-transitory memory to execute instructions from the non-transitory memory to perform operations comprising:
storing a file with a first restrictive permission in a host file system;
creating an extended attribute corresponding to the file and storing a second restrictive permission in the extended attribute, wherein the second restrictive permission is equivalent to the first restrictive permission;
changing, using a converter, the first restrictive permission to a third less-restrictive permission, wherein the first restrictive permission and the third less-restrictive permission are different;
receiving a first request from a first requester using the host file system to access the file;
in response to the first request, accessing the file, by the first requester, through the host file system, the host file system's access being based on the third less-restrictive permission;
receiving a second request from a second requester using a container file system to access the file;
before providing the file to the second requester, changing, using a converter, a permission that is used to access the file from the third less-restrictive permission to the stored second restrictive permission; and
in response to the second request, accessing the file, by the second requester, through the container file system, the container file system's access being based on the second restrictive permission, wherein the container file system is executing in an operating environment that is isolated from an operating environment of the host file system.