Patent ID: 11922205
Assignee: INSPUR SUZHOU INTELLIGENT TECHNOLOGY CO., LTD.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 18:
19. A non-transient computer-readable storage medium for saving a computer program, wherein the computer program, when executed by a processor, causes the processor to perform operations of:
acquiring a security-enhanced linux (SElinux) label, wherein the SElinux label comprises five elements of User, Role, Type, Sensitivity and Category;
setting elements other than the Category in the SElinux label as default values;
obtaining a plurality of distinct label groups by assigning different values to variables in a preset Category variable combination, wherein the Category comprises a preset variable combination selected from a plurality of preset Category variable combinations within a first predefined range, and wherein each of the different values assigned to variables is within a second predefined range;
configuring each of the label groups for creating virtual machines in a private cloud, so that virtual machines configured with the same label group intercommunicate, and virtual machines configured with different label groups are isolated from each other;
wherein the configuring each of the label groups for creating virtual machines in a private cloud comprises:
extracting identification information about a label configuration switch and an ID of a to-be-configured label group from a request for creating a virtual machine, wherein the label configuration switch is used for indicating whether a SElinux label group is set for the virtual machine;
determining that the to-be-configured label group is available based on the ID of to-be-configured label group being stored in a label group data table;
configuring, based on the to-be-configured label group, a basic parameter file used for creating a virtual machine; and
creating the virtual machine based on the basic parameter file, in response to determining based on the identification information that the label configuration switch is enabled and determining based on the ID that the to-be-configured label group is available.