Vmware, Inc.

Ravindra Kumar

Petr Vandrovec

Kevin Scott Christopher

David Lemke

Ming Hua Zhou

Yogendra Baldev Bhasin

Solutions for enabling lower privilege users (e.g., applications, virtualized computing environment applications such as virtual machines or containers) to perform requests for service (e.g., remote procedure calls) that require higher privilege include: receiving, by a relay service executing at a first privilege level, from an application executing at a lower privilege level, a received request for service. The first privilege level is sufficient for the request, however, the application's privilege level is insufficient. The relay service determines whether the application is authorized to perform the request by comparing the application identity and the request with privilege exception information (e.g., a list of application identities and corresponding requests that are subject to privilege exception). If the application's request is authorized, the relay service relays the request (e.g., as a hypercall) to a destination service at the relay's service own privilege level and then relays the received response back to the application.

Authorizing lower privilege users to invoke privileged calls

Disclosed are various embodiments for providing content to virtual machines. A request for content can be received, wherein the request originates from a virtual machine hosted by the computing device, comprises a unique identifier for the content, and is received from the virtual machine through an inter-process communication mechanism. The unique identifier can be validated. Content can then be retrieved using the unique identifier. A copy of the content can then be provided to the virtual machine in response to validation of the unique identifier, the content being provided to the virtual machine through the inter-process communication mechanism.

Growing community of inventors

San Jose, CA, United States of America

Ravindra Kumar