Abstract: Systems, methods, and apparatuses for determining a cause of an error in a computing environment, such as a permission denied error in a linux computing environment, are provided herein. An example method comprises executing an application in a linux environment, monitoring a plurality of linux subsystems and functions via an instrumentation inserted on a kernel, and responsive to a failure of the application, providing a summary of a cause of the failure based upon the monitoring of the linux subsystems and functions.

Abstract: Systems, methods, and apparatuses for determining a cause of an error in a computing environment, such as a permission denied error in a linux computing environment, are provided herein. An example method comprises executing an application in a linux environment, monitoring a plurality of linux subsystems and functions via an instrumentation inserted on a kernel, and responsive to a failure of the application, providing a summary of a cause of the failure based upon the monitoring of the linux subsystems and functions.

Abstract: A peer device may determine a reliability level of a connection with another peer device during a learning duration at instances in a communication session. The connection can be established using key establishment and management protocols. The peer device can adjust a frequency with which the peer device determines the reliability level of the connection during the communication session. The peer device can determine an updated reliability level of the connection in view of the adjusted frequency, and then optimize resource utilization by key establishment and management protocols.

Abstract: An operating system identifies a request of a process to create a new object with a name in a file system of the processing device. The operating system identifies a policy rule applicable to the new object in view of at least the name of the new object. The operating system creates a label for the new object using the applicable policy rule and associates the new object with the created label.

Abstract: A peer device may determine a reliability level of a connection with another peer device during a learning duration at instances in a communication session. The connection can be established using key establishment and management protocols. The peer device can adjust a frequency with which the peer device determines the reliability level of the connection during the communication session. The peer device can determine an updated reliability level of the connection in view of the adjusted frequency, and then optimize resource utilization by key establishment and management protocols.

Abstract: An operating system identifies a request of a process to create a new object with a name in a file system of the processing device. The operating system identifies a policy rule applicable to the new object in view of at least the name of the new object. The operating system creates a label for the new object using the applicable policy rule and associates the new object with the created label.

Abstract: An operating system identifies a request of a process to create, in a file system of the computing device, a new object. The operating system creates an object label for the new object, identifies one or more security policy rules applicable to the process, and verifies whether the process is authorized to create the new object with the object label in the file system of the computing device using the applicable security policy rules. When the process is authorized to create the new object with the object label, the operating system creates the new object with the object label in the file system of the computing device. When the process is not authorized to create the new object with the object label, an error message is generated.

Abstract: Methods and systems for centralized kernel module loading are described. In one embodiment, a computing system detects a kernel module load event to load a kernel module into a kernel of a client. Upon detection of the kernel module load event, the computing system computes a cryptographic hash of the kernel module, and sends the cryptographic hash to an access control server to verify whether the cryptographic hash is a permitted hash. The computing system receives a response from the access control server to permit or deny the kernel module load event, and permits or denies the kernel module load event based on the response.

Abstract: An operating system identifies a request of a process to create, in a file system of the computing device, a new object, the new object having a name. The operating system identifies a policy rule applicable to the new object using a label of the process, a label of a parent object pertaining to the new object, a class of the new object, and the name of the new object. The operating system creates a label for the new object using the applicable policy rule and associates the new object with the associated label.

Abstract: An operating system identifies a request of a process to create, in a file system of the computing device, a new object. The operating system creates an object label for the new object, identifies one or more security policy rules applicable to the process, and verifies whether the process is authorized to create the new object with the object label in the file system of the computing device using the applicable security policy rules. When the process is authorized to create the new object with the object label, the operating system creates the new object with the object label in the file system of the computing device. When the process is not authorized to create the new object with the object label, an error message is generated.

Abstract: An operating system identifies a request of a process to create, in a file system of the computing device, a new object, the new object having a name. The operating system identifies a policy rule applicable to the new object using a label of the process, a label of a parent object pertaining to the new object, a class of the new object, and the name of the new object. The operating system creates a label for the new object using the applicable policy rule and associates the new object with the associated label.

Abstract: Methods and systems for centralized kernel module loading are described. In one embodiment, a computing system detects a kernel module load event to load a kernel module into a kernel of a client. Upon detection of the kernel module load event, the computing system computes a cryptographic hash of the kernel module, and sends the cryptographic hash to an access control server to verify whether the cryptographic hash is a permitted hash. The computing system receives a response from the access control server to permit or deny the kernel module load event, and permits or denies the kernel module load event based on the response.

Abstract: The invention relates to a printer device for printing on a paper tape and for cutting the tape into printed tickets. The device comprises a frame having a cover hinged on the frame, a printer, cutter means, and guide means for guiding the tape between the printer and the cutter means. According to the invention, the guide means are formed by two walls substantially parallel to the axis of a paper drive roller, one wall being carried by the cover and the other wall being carried by the frame, in such a manner as to impose an S-bend on the portion of the tape that extends between the printer and the cutter means.

Abstract: The invention relates to a printer device for printing on a paper tape and for cutting the tape into printed tickets. The device comprises a frame having a cover hinged on the frame, a printer, cutter means, and guide means for guiding the tape between the printer and the cutter means. According to the invention, the guide means are formed by two walls substantially parallel to the axis of a paper drive roller, one wall being carried by the cover and the other wall being carried by the frame, in such a manner as to impose an S-bend on the portion of the tape that extends between the printer and the cutter means.