Function of security kernel is to maintain security of information inside system.
安全内核的功能是维护系统内部信息的安全。
A new architecture with high security based on security kernel is presented in this paper.
文中描述了一个基于安全内核的、具有高安全性的信息安全包体系架构的设计。
But the kernel security can not be perfect. The security kernel model can improves kernel security.
因此，在面向对象的内核设计中引入安全内核模型可以改善内核设计的安全性问题。
With function of protection ring and security kernel, a novel model for enhancing security of operating system is proposed.
利用保护环和安全内核的功能，提出了一种新的增强操作系统安全性的模型。
A new architecture with high security based on security kernel is presented in this paper, security kernel can ensure the information in the toolkit.
文中描述了一个基于安全内核的、具有高安全性的信息安全包体系架构的设计。
It includes mandatory access control built on top of the Flux Advanced security Kernel (Flask) security architecture, including type enforcement and multilevel security (MLS), all as plug-in modules.
它包括构建在FluxAdvancedSecurity Kernel (Flask)安全架构之上的强制访问控制，后者包括以插件模块形式提供的类型强制和多级安全(MLS)。
Kernel code is modified prior to accessing internal objects to invoke a hook that represents an enforcement function, which implements the security policy.
在访问内部对象之前对内核代码进行修改，以调用一个代表实施函数的钩子，该实施函数实现安全策略。
The service can be used by remote filesystems or other kernel services to manage cryptography, authentication tokens, cross-domain user mappings, and other security concerns.
远程文件系统和其他内核服务可以使用这个服务来管理密码学、身份验证标记、跨域用户映射和其他安全问题。
Vendors choosing this method of kernel adaptation will therefore be held responsible for maintaining their own packages for the lifetime of their product, with respect to both bugs and security fixes.
供应商选择这种方法将因此内核适应追究维持其产品的寿命与自己包两方面的错误和安全补丁，负责。
For programs running in user space, there are common security restrictions implemented in the kernel of almost all modern operating systems (in one fashion or another).
对于运行在用户空间中的程序，具有公共安全性限制，它们在几乎所有现代操作系统的内核中实现(以一种或另一种方式)。
Internet Protocol Security (IPSec) is another enhancement to the 2.6 kernel.
Internet协议安全(IPSec)是对2.6内核的另一个增强。
You can find this option under Security options in the make *config step of kernel compilation.
可以在内核编译的make *config步骤中Securityoptions下面找到这个选项。
System administration covering topics such as user management, printer configuration, X11, package management, building a kernel, system initialization, and security.
系统管理，包括用户管理、打印机配置、X11、包管理、建立内核、系统初始化和安全等主题。
Microsoft initially planned to prevent other firms' security software from accessing the "kernel" of Vista, in effect the heart of the system.
微软原先打算阻止其他公司的安全软件访问Vista的“内核”，以防它们对系统重要部分产生影响。
This version of the business version of Windows tacked the Windows 95 interface on top of the NT kernel, which was stabler and more secure than Windows 95. Security and networking were also improved.
这个商业版的Windows紧随在NT内核上的Windows 95界面，比Windows 95更加安全稳定，安全和网络也得到了提高。
The Linux kernel still does its normal security checks; for example, if you want to write to a file, you still need write permission to it.
Linux内核仍去做它常规的安全检测；例如，如果您要写一个文件，您仍需要对其有写权限。
The next section explores the SELinux implementation and how security enforcement was transparently added to the Linux kernel.
下一节将探讨SELinux实现，以及如何将安全增强透明地添加到Linux内核中。
Ubuntu 10.10 Alpha 3 USES version 2.6.35 of the Linux kernel, which includes numerous security enhancements over previous versions. It also updates the GNOME desktop environment to version 2.31.
Ubuntu 10.10Alpha3使用的是版本为2.6.35的Linux内核，包含了众多安全更新，同时也把GNOME桌面环境升级到2.31。
Every critical kernel object, such as every filesystem object and every process, has a "security context" associated with them.
每一个重要的内核对象，比如每个文件系统对象和每个进程，都有一个关联到它们的“安全上下文(security context)”。
Several different security projects, including the Security-Enhanced Linux (SELinux) project, had asked him to add their security approach to the Linux kernel.
一些不同的安全项目，包括Security-EnhancedLinux（SELinux）项目，要求他将他们的安全方法添加到 Linux 内核中。
The inclusion of version 4 of the Networking File System (NFSv4) into the 2.6 kernel allows for improvements in security and functionality not seen in previous versions of NFS.
内核对网络文件系统版本4 (NFSv4)的引入，带来了NFS先前版本不曾出现过的安全性和功能性的改进。
The kernel usually has some sort of security model that manages access to devices, files, processes, and objects.
内核通常具有某种类型的安全模式来管理对设备、文件、进程和对象的访问。
In popular operating systems, there are generally no security checks in the kernel, except at the interfaces through which the end user calls into the OS.
在流行操作系统中，除了在最终用户调用到操作系统的接口上进行安全性检查之外，在内核中通常没有安全性检查。
The flow chart in Figure 1 demonstrates how TAMOS implements the security layer by intercepting the system calls at the kernel level.
图1的流程图演示了TAMOS如何通过在内核层面拦截系统调用来实现安全层。
Then, the kernel itself has a RAMdisk built into it that contains some of the security features; compare with the code found on the hard drive, such as the /var/utils/checkkernel.tcl script.
然后，内核本身具有一个内嵌的RAMdisk，其中包含了一些安全性特性；我们可以对在硬盘上找到的代码进行比较，例如 /var/utils/checkkernel.tcl 脚本。
On this particular model of TiVo, there is a hardware security check before the kernel even gets loaded.
在这个特定的TiVo模型中，在加载内核之前，要进行一个硬件安全性检查。
The Linux key retention service is a new mechanism introduced to hold security-related information for fast access by the Linux kernel.
Linux密钥保留服务是一种新的机制，其用途是保存与安全相关的信息，让Linux内核可以快速地访问这些信息。
Test proves that the system can ensure servers' reliable run and security of enterprise users' kernel computing effectively.
测试结果表明，系统能够有效保证服务器的可靠运行和企业核心计算的安全。
The /usr/sbin/setkst command downloads Domain and Domain object information from the /etc/security/domains, and /etc/security/domobjs files into the kernel.
usr/sbin/setkst命令会将域和域对象信息从 /etc/security/domains 和 /etc/security/domobjs文件下载到内核。
The /usr/sbin/setkst command downloads Domain and Domain object information from the /etc/security/domains, and /etc/security/domobjs files into the kernel.
usr/sbin/setkst命令会将域和域对象信息从 /etc/security/domains 和 /etc/security/domobjs文件下载到内核。
应用推荐