Abstract: Certain embodiments of the invention relate to an access control system defining one or more compartments and providing rules, which are applied to the compartment(s), to control access to network services by entities that are associated with a said compartment, the rules comprising at least a first kind of rule for controlling access to network services that use dynamically-assigned communications ports.

Abstract: A stacked file system and method for managing a stack are disclosed. In one embodiment, a stacked file system includes a stack and a stack manager. The stack has at least a file system stacked on top of an underlying file system. Further, the stack manager has a logic for managing the stack, where the logic includes an eject operation for ejecting a first file system from the stack.

Abstract: Included are embodiments for multiplexing reserved ports. At least one embodiment of a method includes receiving (732) a request to communicate with a host (502) and determining (736) whether a mapping exists between the host (502) and a first remote procedure call (RPC) client handle (506). Some embodiments include in response to determining that a mapping does not exist between the host and the first RPC client handle, determining (740) a second RPC client handle (506) to establish a mapping, the established mapping facilitating RPC communication with the host.

Abstract: An efficient stacked file system and method are disclosed herein. The stacked file system is capable of inserting a layer into a stack and ejecting the same from the stack in accordance with the requirement of the functionalities provided by the layer; thereby minimises adverse affect on the overall file system performance.

Abstract: Certain embodiments of the invention relate to an access control system defining one or more compartments and providing rules, which are applied to the compartment(s), to control access to network services by entities that are associated with a said compartment, the rules comprising at least a first kind of rule for controlling access to network services that use dynamically-assigned communications ports.

Abstract: A computing system configured to receive service requests, comprising a memory for storing service request data and a service request handler. The computing system is configured to respond to a service request by registering a call back routine configured to pass details of the service request to the memory if executed by a panic process upon a system crash, the memory is configured to store the details of the service request passed to it, and the service request handler is configured to compare the service request to the service request data in the memory and to deny the service request if the service request matches a predefined portion of the service request data.