Patent ID: 7437556

Claim:
A method comprising: establishing a global zone, wherein the global zone is a global operating system environment that can support execution of one or more processes; establishing a non-global zone within the global zone, wherein the non-global zone is a partition of the global operating system environment, wherein the non-global zone operates as a separate and distinct operating system environment, and wherein the non-global zone can support execution of one or more processes; isolating a first process executing within the non-global zone to the non-global zone so that the first process does not have visibility or access to processes and objects that are not associated with the non-global zone; permitting a second process executing within the global zone to have visibility and access to processes and objects associated with the global zone; and permitting the second process executing within the global zone to have access to processes and objects associated with the non-global zone, if the second process has a privilege to cross zone boundaries.