Abstract: Systems and methods are disclosed for facilitating collaboration amongst individuals working on a coordinated campaign toward certain goals. In furtherance of these goals, the individual team members use technical resources provided by specialized tools, which are also sometimes referred to as applications or products. As the campaign progresses, these applications generate a large volume of data, some of which may be useful to teams other than those which were originally responsible for producing the data. In certain embodiments a campaign manager platform is used to facilitate data sharing and collaboration amongst the various teams that comprise a campaign. In such embodiments the individual team members interact not only with the applications specifically adapted for their team, but also with the campaign manager, which provides a medium for exchanging data and ideas with other teams.

Abstract: Systems and methods are disclosed for facilitating collaboration amongst individuals working on a coordinated campaign toward certain goals. In furtherance of these goals, the individual team members use technical resources provided by specialized tools, which are also sometimes referred to as applications or products. As the campaign progresses, these applications generate a large volume of data, some of which may be useful to teams other than those which were originally responsible for producing the data. In certain embodiments a campaign manager platform is used to facilitate data sharing and collaboration amongst the various teams that comprise a campaign. In such embodiments the individual team members interact not only with the applications specifically adapted for their team, but also with the campaign manager, which provides a medium for exchanging data and ideas with other teams.

Abstract: A filesystem can be shared between containers. For example, a computing device having a host filesystem can launch a first container from an image file. Launching the first container can include creating an initialization directory for the first container on the host filesystem. The initialization directory can include a filesystem to be shared between containers. Launching the first container can also include creating a first filesystem directory for the first container on the host filesystem and mounting the initialization directory to the first filesystem directory. The computing device can also launch a second container from the image file. Launching the second container can include creating a second filesystem directory for the second container on the host filesystem and mounting the initialization directory to the second filesystem directory to enable the second container to access the filesystem.

Abstract: An example method of installing one or more files on a host file system includes extracting, by an operating system, a container image from a container. The container image stores a set of files and provides an indication of a hierarchical structure for the set of files. The method also includes obtaining, by the operating system, a package in accordance with the container image. The package includes the set of files. The method further includes installing the package on the host file system in accordance with the hierarchical structure for the set of files.

Abstract: An implementation of this disclosure provides a system comprising memory to store a plurality of layers and a processing device coupled to that memory to set up the layers and to mount them into an overlay. The layers comprise an upper and one or more lower layers. The overlay provides access to a plurality files stored in the overlay filesystem. A request from an application to access a file in the mounted overlay is received. An access policy for the mounter that mounted the layers is identified in view of the mounter's credentials. The processing device checks, in view of the access policy, whether a security context label for the file provides access to the application and to the mounter of the overlay in at least one lower layer comprising the file. An instruction to provide the application with access to the file is issued in view of the check.

Abstract: Various embodiments illustrated and described herein include one or more of systems, methods, software, and data structures for package file presentation. Some embodiments include receiving a package file including a presentation specification, one or more content files, and metadata defining display elements within the presentation specification and associating each display element with one of the content files. The package file may then be presented by instantiating the presentation specification as a function of executable code embedded within the presentation specification. Some embodiments further include instantiating each display element, each display element including a link to an associated content file within the package file and to generate and distribute display elements within a graphical user interface.

Abstract: A notification appliance is disclosed. The notification appliance may be a strobe notification appliance, such as an LED strobe notification appliance. The notification appliance may be wall-mounted or ceiling-mounted. Further, the notification appliance may include an optic that is configured to shape the light output from the notification appliance. For example, in a wall-mount, the optic may be mounted off-axis of a plane defined by a back plate of the notification appliance. Further, the notification appliance may be composed of a back plate, a driver board, and a front housing, with the front housing being attached to one or both of the back plate and the driver board. Moreover, the notification appliance may be used with an adapter bracket, which may be used to connect the notification appliance with one or more types of junction boxes.

Abstract: An access control engine can enable a host operating system to propagate a private resource of an isolated virtual environment, such as a container, running on the host operating system outside of the isolated virtual environment. The private resource can include, for example, a file system mounted within the isolated virtual environment. The access control engine can receive a command and launch the isolated virtual environment in response to the command. Also, in response to the command, the access control engine can interface with a kernel of the host operating system to configure the isolated virtual environment so that the private resource is accessible outside the isolated virtual environment.

Abstract: Methods, systems, and computer program products are included for deploying a composite application. A method includes receiving, at a computing device, a container image that includes a nulecule. The nulecule is parsed to identify a first service, a second service, and a parameter of the first service. An input value is received corresponding to the parameter of the first service. A configuration value of the first service is modified to include the input value. The first service and the second service are deployed on the computing device, with the first service being configured with the configuration value.

Abstract: Various embodiments illustrated and described herein include one or more of systems, methods, software, and data structures for presentation of package files including a reference content item. Some embodiments include receiving a reference content item, such as an image, map, or calendar, and mappings of package files to locations within the reference item for display. Such embodiments may then publish the package file. Some other embodiments include generating visual representations of package files including a reference content item and one or more content items mapped to locations within a reference content item. Such a visual representation may include a view of the reference content item and a graphical element representative of the content item at the mapped location within the view of the reference content item.

Abstract: Surgical sutures are provided. In general, the surgical sutures can include a plurality of directional indicators that each visually indicate a same direction, e.g., a direction toward one free end of the suture. The directional indicators can be configured to indicate a position of the suture relative to a patient and/or other medical device(s). The directional indicators can be a function of the suture itself so as to be an integral part thereof. In other words, threads, also referred to as “strands,” that form the suture can define the directional indictors. The suture can be braided using threads of two different colors so as to form the directional arrows as an integral part of the suture when the suture is braided in manufacturing of the suture.

Abstract: Implementations for secure network labeling to control inter-process communications in a multi-tenant Platform-as-a-Service (PaaS) system are disclosed. A method of the disclosure includes initializing, by a processing device of a node, a gear of an application on the node, wherein the node hosts a plurality of gears for a plurality of applications of a multi-tenant Platform-as-a-Service (PaaS) system, and wherein the plurality of applications comprising multi-tenant applications having different owners. The method further includes determining a user identifier (UID) of the gear, generating a custom network security label (NSL) of the gear, assigning the custom NSL to the gear, and applying the custom NSL to an outgoing network packet sent from the gear to another gear within the PaaS system.

Abstract: A notification appliance is disclosed. The notification appliance may be a strobe notification appliance, such as an LED strobe notification appliance. The notification appliance may be wall-mounted or ceiling-mounted. Further, the notification appliance may include an optic that is configured to shape the light output from the notification appliance. For example, in a wall-mount, the optic may be mounted off-axis of a plane defined by a back plate of the notification appliance. Further, the notification appliance may be composed of a back plate, a driver board, and a front housing, with the front housing being attached to one or both of the back plate and the driver board. Moreover, the notification appliance may be used with an adapter bracket, which may be used to connect the notification appliance with one or more types of junction boxes.

Abstract: Surgical sutures are provided. In general, the surgical sutures can include a plurality of directional indicators that each visually indicate a same direction, e.g., a direction toward one free end of the suture. The directional indicators can be configured to indicate a position of the suture relative to a patient and/or other medical device(s). The directional indicators can be a function of the suture itself so as to be an integral part thereof. In other words, threads, also referred to as “strands,” that form the suture can define the directional indictors. The suture can be braided using threads of two different colors so as to form the directional arrows as an integral part of the suture when the suture is braided in manufacturing of the suture.

Abstract: Implementations for secure network labeling to control inter-process communications in a multi-tenant Platform-as-a-Service (PaaS) system are disclosed. A method of the disclosure includes initializing, by a processing device of a node, a gear of an application on the node, wherein the node hosts a plurality of gears for a plurality of applications of a multi-tenant Platform-as-a-Service (PaaS) system, and wherein the plurality of applications comprising multi-tenant applications having different owners. The method further includes determining a user identifier (UID) of the gear, generating a custom network security label (NSL) of the gear, assigning the custom NSL to the gear, and applying the custom NSL to an outgoing network packet sent from the gear to another gear within the PaaS system.