Patent ID: 11886605
Assignee: RED HAT, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 18:
19. A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause at least one machine to perform operations comprising:
creating an extended attribute of a file stored in a host file system and storing a second restrictive permission in the extended attribute, wherein the second restrictive permission is copied from a first restrictive permission associated with the file;
changing, using a converter, the first restrictive permission to a third less-restrictive permission;
in response to receiving a request from a user of the host file system to access the file, accessing the file through the host file system, the host file system's access being based on the third less-restrictive permission; and
in response to receiving a request from a user of a container file system to access the file, changing, using the converter, a permission that is used to access the file from the third less-restrictive permission to the second restrictive permission without writing to the third less-restrictive permission, such that the user of the container file system accesses the file through the container file system, the container file system's access being based on the second restrictive permission, wherein the container file system is executing in an operating environment that is isolated from an operating environment of the host file system.