In one embodiment, the present invention is related to a computer system including compartments implemented on an operating system. A database contains access rules with said access rules defining which compartments are authorized to access particular file resources. A kernel module receives a system...http://www.google.de/patents/US20030009685?utm_source=gb-gplus-sharePatent US20030009685 - System and method for file system mandatory access control