Patent ID: 9158930
Filing Date: 2015-10-13
Classification: G06F

Abstract:
1. A method comprising: identifying, by an operating system executing on a processing device on a computing device, a request of a process to create a new object in a file system of the computing device; creating, by the operating system, an object label for the new object; identifying, by the operating system, one or more security policy rules for creating a security label for the new object applicable to the process, each of the one or more security policy rules using a label of the process and a class of the new object; verifying, by the operating system, whether the process is authorized to create the new object with the object label in the file system of the computing device using an applicable security policy rule; in response to verifying that the process is authorized to create the new object with the object label, creating, by the operating system, the new object with the object label in the file system of the computing device; and in response to verifying that the process is not authorized to create the new object with the object label, generating an error message.