Abstract: A method, system, or computer program product for controlling access to software component features is disclosed. There are three available states for selectable component features. The three available states, of which one is selected, are: (i) enabled access to the selected software component features for users and other software component features on a data storage system, (ii) enabled access to the selected software component features by other software component features on a data storage system, or (iii) disabled access to the software component features.

Abstract: A method and system for synchronizing a plurality of data images in a computer system, includes a primary image and at least one secondary image which are synchronized. A host computer issues write requests to a primary image site which is also transmitted to a secondary image site. Writing to the primary image and the secondary image at the primary image site and secondary site is conducted simultaneously. If a failure to write to the secondary image occurs, a fracture log is created which is a bitmap representative of changed regions in the primary image at the primary image site in response to the write request. When writing to the secondary image is restored, the log can be used to synchronize the primary image and the secondary image.

Abstract: A security system for a computer system imposes specific limitations on who has access to the computer system and to exactly what operations and data. Viruses are securely contained and prevented from expanding into areas where they can destroy stored programs or data. Viruses are also prevented from being introduced or executed in a large number of instances. The totality of computer functions is broken up into a set of events with an associated set of capabilities and different capabilities are assigned to each user depending on the particular job which that user is to do on the computer system. Also, security labels are placed on each data file and other system resources, and on each process. Further, a range of hierarchy/category labels (MAC labels) is assigned to each process to define a sub-lattice in which special capabilities can apply.