《Operating System Concepts》學(xué)習(xí)第 59 天，p667-p699 總結(jié)，總計(jì) 32 頁。

一、技術(shù)總結(jié)

1.protection rings

2.capability list

In protection, a list of objects together with the operations allowed on those objects.

3.role-based access control (RBAC)

A method of access control in which roles rather than users have access rights; applies the principle of least privilege to the protection of operating systems.

4.DAC & MAC

(1)DAC

discretionary access control (DAC): Optional, as opposed to mandatory, access control.

(2)MAC

mandatory access control (MAC): Access control settings enforced in the form of system policy.

二、英語總結(jié)(生詞：2)

1.pervasive

(1)pervade: per-("forward", hence "through") + vadere("to go")

vt. pervade literally means "to go through", spread through, diffuse (itself) throughout(彌漫)。

(2)pervasive

adj. present in everywhere(普遍，普及)。

(3)示例

As computer systems have become more sophisticated and pervasive in their applications, the need to protect their integrity has also grown(《Operating System Concepts》第 667 頁)。

2.conceive

(1)conceive: con-(intensive prefix, 強(qiáng)調(diào)作用) + capere("to take")

vi/vt. conceive literally means "to take in", to image。

(2)示例

Protection was originally conceived as an adjunct to multiprogramming operating systems, so that untrustworthy users might safely share a common logical name space, such as a directory of files, or a common physical name space, such as memory(《Operating System Concepts》第 667 頁)。

關(guān)于英語的注解同步更新匯總到 https://github.com/codists/English-In-CS-Books 倉(cāng)庫(kù)。

三、其它

第 17 章(Protection)簡(jiǎn)評(píng)：看到了一些實(shí)際場(chǎng)景中的應(yīng)用——ACL，RBACL，其它內(nèi)容首先于個(gè)人的經(jīng)驗(yàn)，暫未看到起應(yīng)用。

四、參考資料

1. 編程

(1) Abraham Silberschatz，Peter Baer Galvin，Greg Gagne《Operating System Concepts》：https://book.douban.com/subject/30272539/

2. 英語

(1) Etymology Dictionary：https://www.etymonline.com

(2) Cambridge Dictionary：https://dictionary.cambridge.org

歡迎搜索及關(guān)注：編程人(a_codists)