Patent ID: 8601580

Claim:
A non-transitory machine readable medium storing machine executable instructions which when executed by the machine cause the machine to execute a method comprising: creating virtual roots for a plurality of executive jails separate from a parent operating system and separate from each other in a first set of locations in a parent file structure of the parent operating system; setting privileges associated with each of the individual executive jails to disk read-only for users accessing the executive jails via an interface with a wide area network; creating virtual roots for a plurality of administrative jails corresponding to the plurality of executive jails separate from the parent operating system, separate from each other, and separate from each of the executive jails in a second set of locations in the parent file structure of the parent operating system; hiding all of the administrative jails from all of the executive jails; hiding the parent operating system from all of the executive jails and from all of the administrative jails; and cross mounting a user configuration information from a first of the administrative jails in to a first of the executive jails corresponding to the first administrative jail.