Patent ID: 7650501
Filing Date: 2010-01-19
Classification: G06F

Abstract:
1. A method for applying minimization to a label-aware computer system, comprising: creating a minimization compartment on the computer system, wherein the minimization compartment has an associated minimization label, wherein the minimization compartment is a container for entities that share a relationship of having a minimized state within the computer system as indicated by the minimization label, and wherein each entity within the minimization compartment is retained on the computer system and is only visible to and accessible by another entity having clearance to the minimization label; obtaining a unified security profile, the unified security profile providing a complete listing of software packages required to be installed on the computer system; identifying extraneous files on the computer system that are not associated with at least one software package listed within the unified security profile; rewriting a label of each identified extraneous file to the minimization label, the rewriting causing each file having the minimization label to be included in the minimization compartment; and removing reference to each identified extraneous file from a package manifest of the computer system, wherein the package manifest of the computer system provides a listing of packages and files installed on the computer system.