System, method, and computer program product for scoping operating system semanticis in a computing environment supporting multi-enclave processes

A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform method steps for scoping operating system semantics in the machine, a process comprising at least one enclave executing in the machine, said method steps comprising:

• (1) determining whether an operating system semantic is explicitly directed to the process;
• (2) scoping said operating system semantic to the process if said operating system semantic is explicitly directed to the process;
• (3) determining whether said operating system semantic is implicitly directed to the process;
• and
• (4) scoping said operating system semantic to an enclave of the process in which said operating system semantic occurs if said operating system semantic is implicitly directed to the process.

A method of scoping operating system semantics in a computing environment, a process comprising at least one enclave executing in the computing environment, the method comprising the steps of:

• (1) determining whether an operating system semantic is explicitly directed to the process;
• (2) scoping said operating system semantic to the process if said operating system semantic is explicitly directed to the process;
• (3) determining whether said operating system semantic is implicitly directed to the process;
• and
• (4) scoping said operating system semantic to an enclave of the process in which said operating system semantic occurs if said operating system semantic is implicitly directed to the process.

A computer system, comprising:

• a computer;
• a process having at least one enclave executing in said computer;
• a semantic coordinating module for scoping operating system semantics in said computer system, said semantic coordinating module comprising
• first determining means for determining whether an operating system semantic is explicitly directed to said process,
• means for scoping said operating system semantic to said process if said operating system semantic is explicitly directed to said process,
• second determining means for determining whether said operating system semantic is implicitly directed to said process, and
• means for scoping said operating system semantic to an enclave of said process in which said operating system semantic occurs if said operating system semantic is implicitly directed to said process.

A computer system, comprising:

• a computer;
• a process;
• a first enclave in said process, wherein said first enclave defines the scope of language semantics within said first enclave, said first enclave executing within an address space within said computer;
• a semantic coordinating module for scoping operating system semantics in said computer system, said semantic coordinating module comprising
• first determining means for determining whether an operating system semantic is explicitly directed to said process,
• means for scoping said operating system semantic to said process if said operating system semantic is explicitly directed to said process,
• second determining means for determining whether said operating system semantic is implicitly directed to said process, and
• means for scoping said operating system semantic to an enclave of said process in which said operating system semantic occurs if said operating system semantic is implicitly directed to said process.