Patent ID: 7814465

Claim:
A method, executed by a computer system, for verification of an application comprising: identifying a non-global zone of a plurality of zones for executing the application, wherein the plurality of zones execute within a single instance of an operating system, and wherein each of the plurality of zones corresponds to an isolated execution environment within the single instance; obtaining a list of permissions for the non-global zone; obtaining a restricted instruction listing corresponding to the non-global zone, wherein the restricted instruction listing comprises application restricted instructions and platform restricted instructions; analyzing the application to identify a dependent code restricted instruction, wherein analyzing the application comprises: comparing a plurality of instructions in the application with the restricted instruction listing to identify which of the plurality of instructions in the application is in the restricted instruction listing; identifying a call in the application to dependent code external to the application; and comparing a plurality of instructions in the dependent code with the restricted instruction listing to identify the dependent code restricted instruction in the dependent code; and generating a report comprising an alert identifying the dependent code restricted instruction when a required permission to execute the restricted instruction is not in the list of permissions.