《Operating System Concepts》学习第 59 天，p667-p699 总结，总计 32 页。

一、技术总结

1.protection rings

2.capability list

In protection, a list of objects together with the operations allowed on those objects.

3.role-based access control (RBAC)

A method of access control in which roles rather than users have access rights; applies the principle of least privilege to the protection of operating systems.

4.DAC & MAC

(1)DAC

discretionary access control (DAC): Optional, as opposed to mandatory, access control.

(2)MAC

mandatory access control (MAC): Access control settings enforced in the form of system policy.

二、英语总结(生词：2)

1.pervasive

(1)pervade: per-("forward", hence "through") + vadere("to go")

vt. pervade literally means "to go through", spread through, diffuse (itself) throughout(弥漫)。

(2)pervasive

adj. present in everywhere(普遍，普及)。

(3)示例

As computer systems have become more sophisticated and pervasive in their applications, the need to protect their integrity has also grown(《Operating System Concepts》第 667 页)。

2.conceive

(1)conceive: con-(intensive prefix, 强调作用) + capere("to take")

vi/vt. conceive literally means "to take in", to image。

(2)示例

Protection was originally conceived as an adjunct to multiprogramming operating systems, so that untrustworthy users might safely share a common logical name space, such as a directory of files, or a common physical name space, such as memory(《Operating System Concepts》第 667 页)。

关于英语的注解同步更新汇总到 https://github.com/codists/English-In-CS-Books 仓库。

三、其它

第 17 章(Protection)简评：看到了一些实际场景中的应用——ACL，RBACL，其它内容首先于个人的经验，暂未看到起应用。

四、参考资料

1. 编程

(1) Abraham Silberschatz，Peter Baer Galvin，Greg Gagne《Operating System Concepts》：https://book.douban.com/subject/30272539/

2. 英语

(1) Etymology Dictionary：https://www.etymonline.com

(2) Cambridge Dictionary：https://dictionary.cambridge.org

欢迎搜索及关注：编程人(a_codists)