Abstract: A method performed by a storage management computer includes (a) receiving a set of storage profile definitions (SPDs) from an administrator of a data storage system over a user interface, each SPD of the set of SPDs including (1) a storage profile name and (2) a set of storage policies assigned to that SPD, (b) providing the storage profile names from the set of SPDs to an environment management application, the environment management application being configured to manage environments that use storage from the data storage system, (c) in response to providing, receiving a selection of a particular SPD from the environment management application to be used in connection with a particular environment, and (d) provisioning a unit of storage from the data storage system to the particular environment in accordance with the set of storage policies assigned to the particular SPD.

Abstract: A security system for a computer system imposes specific limitations on who has access to the computer system and to exactly what operations and data. Viruses are securely contained and prevented from expanding into areas where they can destroy stored programs or data. Viruses are also prevented from being introduced or executed in a large number of instances. The totality of computer functions is broken up into a set of events with an associated set of capabilities and different capabilities are assigned to each user depending on the particular job which that user is to do on the computer system. Also, security labels are placed on each data file and other system resources, and on each process. Further, a range of hierarchy/category labels (MAC labels) is assigned to each process to define a sub-lattice in which special capabilities can apply.