Patent ID: 9038128
Filing Date: 2015-05-19
Classification: G06F

Abstract:
1. A method, comprising: generating, by a virtual machine (VM) executed by a processing device, a unique security category label (SCL) for each local user identification (UID) maintained by the VM; for each local UID maintained by the VM, assigning the unique SCL associated with the local UID to one or more Internet Protocol (IP) addresses mapped to the local UID; receiving, by the VM, a request to initialize an application on the VM, wherein the VM hosts a plurality of applications comprising the application, the plurality of applications comprising multi-tenant applications having different owners; assigning, by the VM, a local UID of the local UIDs maintained by the VM to the application; assigning, by the VM, files of the application the unique SCL associated with the local UID of the application; and assigning, by the VM, the unique SCL associated with the local UID of the application to a running process of the application.