Patent ID: 8387114

Claim:
A method, comprising: creating, for a process associated with a client network service by a secure workload partition manager executed by a processor, a secure workload partition within a logical partition executing in a server environment having a root partition, wherein the secure workload partition is created without an internet protocol (IP) address; establishing, by the secure workload partition manager, a socket connection for the process within the secure workload partition, wherein establishing the socket connection for the process within the secure workload partition comprises: creating, by the secure workload partition manager, the process within the root partition of the server environment; branding, by the secure workload manager, the process into the secure workload partition based on a file descriptor for the process, wherein branding the process comprises transferring the process from the root partition to the secure workload partition; determining, by the secure workload partition manager, whether one or more other open file descriptors exist for the process other than the file descriptor; and responsive to one or more other open file descriptors existing, closing, by the secure workload partition manager, the one or more other open file descriptors for the process; and executing, by the secure workload manager, the process within the secure workload partition to provide the client network service utilizing the socket connection.