Patent ID: 8656412

Claim:
A computer system comprising: an operating system having a kernel level and a user level; the kernel level configured with at least a first container and a second container; a namespace manager to assign a first set of namespaces to the first container and to assign a second set of namespaces to the second container, the first and second containers having a partially shared file system, wherein the first namespace set is isolated from the second namespace set, with at least one shared object accessible across a shared namespace; a socket manager to create a socket at the kernel level in the shared namespace of the at least one shared object; a permission mechanism to create a conduit between the containers based on a permission setting in one of the first and second containers, wherein the conduit is formed across a boundary between the first and second namespace by a connection of the containers; and a direction mechanism to control direction of the created conduit based on a match setting between the containers.