Patent ID: 8307404

Claim:
One or more processor-readable memory having processor-executable instructions that, when executed by a processor, perform a method comprising: generating multiple meta-policies that are organized into a meta-policy layered hierarchy such that an application of a higher layered meta-policy to one or more objects limits corresponding effects of one or more lower layered meta-policies that are subordinate to the higher layered meta-policy on the one or more objects, wherein each meta-policy controls an application of policies to one or more target computing nodes; utilizing common namespaces to provide a common context shared by the policies and meta-policies, each of the common namespaces being defined by a corresponding file extension; analyzing the policies in the context of the meta-policies for the common namespaces to determine one or more overlaps of the policies without knowledge of domain-specific details of each policy, each overlapping occurring when a plurality of policies within a policy domain are in effect at a same time for one or more identical objects on an identical computer system; analyzing the policies in the context of the meta-policies for the common namespaces without knowledge of the domain specific details of each policy to determine a completeness of the policies in covering a plurality of objects using the common namespaces; determining one or more conflicts in the one or more overlaps of the policies based on domain-specific details of each policy, each conflict occurring when a plurality of overlapping policies make conflicting policy statements regarding the one or more identical objects; and computing a resultant set of policies (RSOP) for at least one of the one or more overlaps or one or more conflicts by applying the multiple meta-policies to the policies.