要完成这项任务，可以将您需要保护的文件系统和用户的硬限制设置为1kb。
To do this, set the hard limit to 1kb for the file system and user you want to protect.
虽然文件被放错了位置，但是这个例子强调了针对攻击者保护文件系统的重要性。
Although the files were erroneously placed, this example underscores the importance of guarding your file system against attackers.
不过您也不必担心安全问题，因为文件系统访问控制机制通常都可以提供充分的保护。
However, this is not necessarily a security concern since the file system access control mechanism usually provides sufficient protection.
在线策略，用于加密写到文件系统的数据，以及通过访问控制保护数据。
An online policy is used for encrypting data written to a file system and protecting data with access control.
如果系统找到一个匹配文件保护的密钥，那么这个进程就可以对文件密钥和文件内容进行解密。
If the system finds a key matching the file protection, the process is able to decrypt the file key and file content.
在确保输入不包括无效值之后，可以继续保护文件系统、数据库和会话。
When you make sure your input doesn't include bad values, you can move on to guarding your file system, database, and session.
当进程需要打开一个受efs保护的文件时，系统将对凭据进行测试。
When the process needs to open an EFS-protected file, the system tests the credentials.
无论如何，对系统二进制代码谨慎地应用文件能力，用这种方式替代setuidroot方式，可以更好地保护系统。
Nevertheless, file capabilities applied judiciously to system binaries in place of making them setuid root can help protect your systems.
这些用户组用来保护文件系统以及注册表中的东西。
These groups are used to secure things on the files system and in the registry.
Gazelle浏览器的核心是一个操作系统，可以保护站点上的保资源和管理文件分享。
Gazelle's Browser Kernel is an operating system that exclusively manages resource protection and sharing across web site principals.
尽管这个文件由 ACL (AccessControlList) 保护，只允许根用户访问，但是这对于安全性要求高的系统可能不够。
Though this file is ACL (Access Control List)-protected by root only access, it may not be enough for highly secure systems.
代理由FS(文件系统)代理(保护fs)和一个DB代理(保护数据库备份)组成。
The agent consists of a FS (File System) agent, which guards FS, and a DB (Database Backup) agent, which guards DB.
由于它们存储在计算机文件系统中，所以这些文件系统必须妥善保护。
Since they are stored on computer file systems, those file systems must be carefully protected.
策略允许访问的任何应用程序都可以访问保护点下的文件，前提是该应用程序使用系统库来访问文件。
Any application that the policy allows access to can access the files that are under guard points as long as the application USES system libraries to access the files.
策略允许访问的任何应用程序都可以访问保护点下的文件，前提是该应用程序使用系统库来访问文件。
Any application that is allowed access by the policy can access the files that are under guard points as long as the application USES system libraries to access the files.
此外，这两个文件系统都支持数据重复删除、内部数据保护(类raid保护)、数据和元数据校验和以及其他存储功能(如快照)。
In addition, both file systems support data de-duplication, internal data protection (RAID-like protection), data and metadata checksums, and other storage features (like snapshots).
尽管如此，对于保护资源(如进程、容器、系统文件)，DB 2基本还是依靠本机操作系统。
However, to protect its resources (such as processes, containers, system files), DB2 mostly relies on the native operating system.
360发布了自己的隐私保护器直面QQ。 隐私保护期提醒用户“某些”欺诈软件在未经用户许可的情况下偷偷扫描用户的系统文件和数据。
On Sept 27th, 360 launched its Privacy Protector to go face to face against QQ by reminding users that “some” chatting software was spying on client system’s private files and data without consent.
这并不会保护数据以防可以监听用户输入密码的根权限入侵，它可以为丢失的没有文件系统加密的设备提供保护。
While this does not protect data from a root compromise that can monitor the user inputting the password, it can provide protection for a lost device without file system encryption.
图8展示了一个受保护的版本控制储存库，它用于存放只有已授权人员或系统可以访问的文件。
Figure 8 shows a protected version-control repository used to host files that only authorized people or systems should access.
屏幕保护下拉列表显示系统文件夹中所有的屏幕保护。选择你需要的一个。
The screen saver drop-down list shows all screen savers in the system folder. Choose the screen saver you want.
它不再局限于系统9系统文件夹，而是分布在多个文件夹，其中大部分是无法访问(看不见的，受保护的或没有权限)。
It is no longer confined within the System 9 System folder, but is distributed all around multiple folders, most of them being inaccessible (invisible, protected or permission denied).
将保护系统清理最近使用的文件。
同时半可信代码可以访问网络以及文件系统，访问注册表，以及其他系统保护的资源。
Meanwhile, partially trusted code can be barred from general access to the network and file systems, access to the registry, and other protected resources of the system.
该系统能够根据用户制定的文件保护策略检查文件系统中违反策略的行为，采取相应的保护措施进行文件的实时恢复，进而维护文件系统的完整性。
It can check the violation of policy in file system according to file integrity policies specified by users, take actions to recover files in real time and, thus, maintain file system integrity.
系统文件的权限被自动保护，并会在软件更新时进行更新。磁盘工具中的修复权限功能已经不再需要。
System file permissions are automatically protected, and updated during Software Updates. The Repair permissions function is no longer necessary.
您还可以修改或破坏保护敏感的系统文件，禁止访问可移动驱动器，限制访问控制面板等。
You can also protect sensitive system files from modification or destruction, disable access to the removable drives, restrict access to Control Panel, and more.
PFICS采用一个服务器保护多个主机的文件系统，构成了一个分布式的实时文件保护系统。
PFICS is a distributed file protect system which USES one server to protect file systems of multi-hosts.
NTFS驱动器保护是一个小而有效的应用程序，使您可以防止恶意软件感染的NTFS文件系统格式化可移动驱动器。
NTFS drive Protection is a small but effective application that will enable you to prevent malware from infecting removable drives formatted in NTFS file system.
该保护防止用户删除重要文件和应用程序，在桌面上擅自更改，保存或使用未经授权的程序和损害操作系统。
NetSupport Protect prevents users from deleting critical files and applications, making unauthorized changes to the desktop, saving or using unauthorized programs and harming the operating system.
应用推荐