Method and apparatus for applying application context security controls for software containers
AssigneeAqua Security Software, Ltd.
InventorAmir Gerebe
Life of this patent
Estimating the term…
Abstract
An example method of sharing a resource between software containers includes detecting a request from a first software container to access a resource of a different, second software container, an operational state of the second software container being controlled by a container engine running on the host computing device. The method also includes accepting or rejecting the request based on whether the first and second software containers, which each contain a respective software application, are part of a same logical software application. An example host computing device configured to share resources between software containers is also disclosed.
Claims22
A method of sharing a resource between software containers, the method comprising:
- a host computing device detecting a request from a first software application in a first software container to access a resource of a second software application operating in a second software container that is different from the first software container, an operational state of the second software container being controlled by a container engine running on the host computing device;
- and
- the host computing device accepting or rejecting the request based on whether the first and second software applications are part of a same logical software application, wherein the accepting or rejecting is based on whether the first and second software applications share a logical application identifier of the logical software application.
A host computing device comprising:
- memory configured to store a second software container;
- and
- processing circuitry operatively connected to the memory and configured to:
- detect a request from a first software application in a first software container that is different from the second software container to access a resource of a second software application in the second software container;
- and
- accept or reject the request based on whether the first and second software applications are part of a same logical software application, wherein the acceptance or rejection is based on whether the first and second software applications share a logical application identifier of the logical software application.
Dependencies are inferred from the claim text.