Abstract: In one embodiment, a method includes starting a network-coordination service, a network-interface component, and an application as separate processes within a user space of an operating system of a device; receiving, by the network-coordination service, a request from the application to connect with a host; selecting, by the network-coordination service and in response to the request, the network-interface component to service the requested connection with the host, the network-interface component is associated with a network interface; allocating, by the network-coordination service, a shared memory region for the application and the network-interface component, the shared memory region is associated with a reference; and sending, by the network-coordination service, the reference to the application, the reference is configured to be used by the application to access the shared memory region, and the shared memory region is configured to be used by the application and the network-interface component to commu

Abstract: In one embodiment, a method includes receiving a request to transfer a handle to an object from a first process to a second process, accessing a first security context of the handle and a second security context of the second process, identifying one or more security policies based on at least one of the first security context and the second security context, determining that the handle is allowed to be transferred to the second process by applying the one or more security policies on the first security context of the handle and the second security context of the second process, and transferring the handle to the second process in response to the request.

Abstract: In certain embodiments, a method includes starting an application as a first process within a user space of an operating system. The application instantiates a data storage system associated with the operating system. The method also includes starting a block device service as a second process within the user space of the operating system, the block device service being configured to manage a persistent storage device of the computing device. In addition, the method includes receiving, by a kernel of the operating system, a system call request from the application to communicate with the block device service, the system call request is generated by the application using the data storage system and comprises an access request to access the persistent storage device. The method further includes providing the application, in response to the system call request, access to the block device service through the IPC channel.

Abstract: In one embodiment, a method includes starting a network-coordination service, a network-interface component, and an application as separate processes within a user space of an operating system of a device; receiving, by the network-coordination service, a request from the application to connect with a host; selecting, by the network-coordination service and in response to the request, the network-interface component to service the requested connection with the host, the network-interface component is associated with a network interface; allocating, by the network-coordination service, a shared memory region for the application and the network-interface component, the shared memory region is associated with a reference; and sending, by the network-coordination service, the reference to the application, the reference is configured to be used by the application to access the shared memory region, and the shared memory region is configured to be used by the application and the network-interface component to commu

Abstract: In one embodiment, a method includes starting a network-coordination service, a network-interface component, and an application as separate processes within a user space of an operating system of a device; receiving, by the network-coordination service, a request from the application to connect with a host; selecting, by the network-coordination service and in response to the request, the network-interface component to service the requested connection with the host, wherein the network-interface component is associated with a network interface of the device; allocating, by the network-coordination service, a shared memory region for the application and the selected network-interface component, wherein the shared memory region is associated with a reference; and sending, by the network-coordination service, the reference to the application, wherein the reference is configured to be used by the application to access the shared memory region; wherein the shared memory region is configured to be used by the appli

Abstract: In certain embodiments, a method includes starting an application as a first process within a user space of an operating system. The application instantiates a data storage system associated with the operating system. The method also includes starting a block device service as a second process within the user space of the operating system, the block device service being configured to manage a persistent storage device of the computing device. In addition, the method includes receiving, by a kernel of the operating system, a system call request from the application to communicate with the block device service, the system call request is generated by the application using the data storage system and comprises an access request to access the persistent storage device. The method further includes providing the application, in response to the system call request, access to the block device service through the IPC channel.