安全内核的功能是维护系统内部信息的安全。
Function of security kernel is to maintain security of information inside system.
利用保护环和安全内核的功能，提出了一种新的增强操作系统安全性的模型。
With function of protection ring and security kernel, a novel model for enhancing security of operating system is proposed.
文中描述了一个基于安全内核的、具有高安全性的信息安全包体系架构的设计。
A new architecture with high security based on security kernel is presented in this paper, security kernel can ensure the information in the toolkit.
文中描述了一个基于安全内核的、具有高安全性的信息安全包体系架构的设计。
A new architecture with high security based on security kernel is presented in this paper.
因此，在面向对象的内核设计中引入安全内核模型可以改善内核设计的安全性问题。
But the kernel security can not be perfect. The security kernel model can improves kernel security.
内核通常具有某种类型的安全模式来管理对设备、文件、进程和对象的访问。
The kernel usually has some sort of security model that manages access to devices, files, processes, and objects.
远程文件系统和其他内核服务可以使用这个服务来管理密码学、身份验证标记、跨域用户映射和其他安全问题。
The service can be used by remote filesystems or other kernel services to manage cryptography, authentication tokens, cross-domain user mappings, and other security concerns.
在访问内部对象之前对内核代码进行修改，以调用一个代表实施函数的钩子，该实施函数实现安全策略。
Kernel code is modified prior to accessing internal objects to invoke a hook that represents an enforcement function, which implements the security policy.
供应商选择这种方法将因此内核适应追究维持其产品的寿命与自己包两方面的错误和安全补丁，负责。
Vendors choosing this method of kernel adaptation will therefore be held responsible for maintaining their own packages for the lifetime of their product, with respect to both bugs and security fixes.
图1的流程图演示了TAMOS如何通过在内核层面拦截系统调用来实现安全层。
The flow chart in Figure 1 demonstrates how TAMOS implements the security layer by intercepting the system calls at the kernel level.
通过前面所描述的机制，可以为键不安全的内核扩展授予广泛的数据访问权限，这种机制是一种保护门类型，我们将其称为隐式保护门。
The mechanism described earlier that grants broad data access rights to a key-unsafe kernel extension is a type of protection gate called an implicit protection gate.
系统管理，包括用户管理、打印机配置、X11、包管理、建立内核、系统初始化和安全等主题。
System administration covering topics such as user management, printer configuration, X11, package management, building a kernel, system initialization, and security.
它提供了一台虚拟机，拥有您想要的任何硬件特性，允许Linux内核运行在一个安全的小沙箱中。
It provides a virtualized machine that can have whatever hardware features you want, allowing the Linux kernel to be run in a safe little sandbox.
微软原先打算阻止其他公司的安全软件访问Vista的“内核”，以防它们对系统重要部分产生影响。
Microsoft initially planned to prevent other firms' security software from accessing the "kernel" of Vista, in effect the heart of the system.
Linux内核仍去做它常规的安全检测；例如，如果您要写一个文件，您仍需要对其有写权限。
The Linux kernel still does its normal security checks; for example, if you want to write to a file, you still need write permission to it.
每一个重要的内核对象，比如每个文件系统对象和每个进程，都有一个关联到它们的“安全上下文(security context)”。
Every critical kernel object, such as every filesystem object and every process, has a "security context" associated with them.
Internet协议安全(IPSec)是对2.6内核的另一个增强。
Internet Protocol Security (IPSec) is another enhancement to the 2.6 kernel.
Ubuntu 10.10Alpha3使用的是版本为2.6.35的Linux内核，包含了众多安全更新，同时也把GNOME桌面环境升级到2.31。
Ubuntu 10.10 Alpha 3 USES version 2.6.35 of the Linux kernel, which includes numerous security enhancements over previous versions. It also updates the GNOME desktop environment to version 2.31.
相对于只用于一小部分内核，Singularity的一大部分都是用类型安全的Sing#来编写的。
Other than a small part of the kernel, the bulk of Singularity is written in the type-safe language Sing#.
一些不同的安全项目，包括Security-EnhancedLinux（SELinux）项目，要求他将他们的安全方法添加到 Linux内核中。
Several different security projects, including the Security-Enhanced Linux (SELinux) project, had asked him to add their security approach to the Linux kernel.
在流行操作系统中，除了在最终用户调用到操作系统的接口上进行安全性检查之外，在内核中通常没有安全性检查。
In popular operating systems, there are generally no security checks in the kernel, except at the interfaces through which the end user calls into the OS.
为键不安全的内核进程自动地固定上下文堆栈。
The context stack is automatically pinned for key-unsafe kernel processes.
对于运行在用户空间中的程序，具有公共安全性限制，它们在几乎所有现代操作系统的内核中实现(以一种或另一种方式)。
For programs running in user space, there are common security restrictions implemented in the kernel of almost all modern operating systems (in one fashion or another).
键安全和键保护的内核扩展统称为可以识别键的内核扩展。
A kernel extension that is either key-safe or key-protected is called key aware.
然后，内核本身具有一个内嵌的RAMdisk，其中包含了一些安全性特性；我们可以对在硬盘上找到的代码进行比较，例如 /var/utils/checkkernel.tcl脚本。
Then, the kernel itself has a RAMdisk built into it that contains some of the security features; compare with the code found on the hard drive, such as the /var/utils/checkkernel.tcl script.
下一节将探讨SELinux实现，以及如何将安全增强透明地添加到Linux内核中。
The next section explores the SELinux implementation and how security enforcement was transparently added to the Linux kernel.
严格的API：当Rails更新后会有大量的插件崩溃，这是因为我们并不清楚插件应该深入到内核中的什么地方才是安全的，同时也不知道他们何时会monkeypatching及崩溃。
Rigorous API: Too many plugins break when Rails is updated because it's not clear where they can safely hook into the internals and when they're monkeypatching and should expect things to break.
在这个特定的TiVo模型中，在加载内核之前，要进行一个硬件安全性检查。
On this particular model of TiVo, there is a hardware security check before the kernel even gets loaded.
内核对网络文件系统版本4 (NFSv4)的引入，带来了NFS先前版本不曾出现过的安全性和功能性的改进。
The inclusion of version 4 of the Networking File System (NFSv4) into the 2.6 kernel allows for improvements in security and functionality not seen in previous versions of NFS.
内核对网络文件系统版本4 (NFSv4)的引入，带来了NFS先前版本不曾出现过的安全性和功能性的改进。
The inclusion of version 4 of the Networking File System (NFSv4) into the 2.6 kernel allows for improvements in security and functionality not seen in previous versions of NFS.
应用推荐