Patent ID: 8302151

Claim:
A method, in a security enhanced (SE)Linux software environment wherein one or more subjects respectively seek to access one or more objects, wherein a security policy having rules is associated with the environment and a particular subject commences an effort to access a particular object, comprising the steps of: a subject submitting a request for permission to access an object to a syscall mechanism; the syscall mechanism submitting a message query to a discretionary access component; identifying a domain to which said particular subject belongs; identifying a type that includes said particular object; a security server receiving the message query from the discretionary access component; using one or more rules of said security policy to decide whether or not to permit said particular subject to access said particular object, to create an access decision; and responsive to the access decision, producing in an audio device at least two distinct audible sounds for a user associated with said particular subject, each audible sound communicates specified information pertaining to said decision of whether or not to permit access; a first one of said sounds is generated to indicate a decision that denies said particular subject access to said particular object and a second audible sound is generated to indicate a decision permitting said particular subject to access said particular object, and said particular subject and said particular object each has an identifying label, and different distinct audio signals are used to represent different labels.