回想一下内核模式表示代码执行的特权模式，而用户模式则表示非特权模式（用于那些运行在内核之外的程序）。
Recall that kernel mode represents the privileged mode for code execution, while user mode represents the non-privileged mode (for programs running outside the kernel).
使用FUSE您可以开发功能完备的文件系统：其具有简单的api库，可以被非特权用户访问，并可以安全的实施。
FUSE lets you develop a fully functional filesystem that has a simple API library, can be accessed by non-privileged users, and provides a secure implementation.
可是几个月后，开发者无意地回滚了所作修复，又一次让操作系统置身于有被非特权用户夺取完全根权限之可能的高危风险中。
But several months later, developers inadvertently rolled back the change, once again leaving the OS open to attacks that allow unprivileged users to gain full root access.
这使set-user-ID（非根）程序能够放弃它的所有用户特权，执行一些非特权操作，然后恢复原来的有效用户ID。
This allows a set-user-ID (other than root) program to drop all of its user privileges, do some un-privileged work, and then re-engage the original effective user ID in a secure manner.
这使set-user-ID（非根）程序能够放弃它的所有用户特权，执行一些非特权操作，然后恢复原来的有效用户ID。
This allows a set-user-ID (other than root) program to drop all of its user privileges, do some un-privileged work, and then re-engage the original effective user ID in a secure manner.
应用推荐