Improving comprehension of information in a security enhanced environment by representing the information in audio form

A computer program product embodied in a non-transitory computer readable medium, executed in a processor, in a security enhanced (SE)Linux software environment wherein one or more subjects respectively seek to access one or more objects, wherein a security policy having rules is associated with the environment and a particular subject commences an effort to access a particular object, comprising:

• instructions to submit a request for permission by a subject to access an object to a syscall mechanism;
• instructions for the syscall mechanism to submit a message query to a discretionary access component;
• instructions to identify a domain to which said particular subject belongs;
• instructions to identify a type that includes said particular object;
• instructions for a security server to receive the message query from the discretionary access component;
• instructions to use one or more rules of said security policy to decide whether or not to permit said particular subject to access said particular object, to create an access decision;
• and
• instructions to produce, responsive to the access decision, in an audio device at least two distinct audible sounds for a user associated with said particular subject, each audible sound communicates specified information pertaining to said decision of whether or not to permit access;
• a first one of said sounds is generated to indicate a decision that denies said particular subject access to said particular object and a second audible sound is generated to indicate a decision permitting said particular subject to access said particular object, and said particular subject and said particular object each has an identifying label, and different distinct audio signals are used to represent different labels.

An apparatus, in a software environment wherein one or more subjects respectively seek to access one or more objects, wherein a security policy having rules is associated with the environment and a particular subject commences an effort to access a particular object, comprising:

• a first configured device to identify a domain to which said particular subject belongs, and for identifying a type that includes said particular object;
• a second configured device including a security server to receive a message query and to use one or more rules of said security policy to decide whether or not to permit said particular subject to access said particular object, to create an access decision, the security server configured to receive the message query from a discretionary access component through a hook and through an access vector cache;
• and
• a third configured device to generate, responsive to the access decision, in an audio device at least two distinct audible sounds for a user associated with said particular subject, each audible sound communicates specified information pertaining to said decision of whether or not to permit access, a first one of said sounds is generated to indicate a decision that denies said particular subject access to said particular object, and a second one of said audible sounds is generated to indicate that an error has occurred in the effort of said particular subject to access said particular object, and said particular subject and said particular object each has an identifying label, and different distinct audio signals are used to represent different labels.