The file permitted set is a set that will always be on in the resulting process.
文件允许集中的能力总会在产生的进程上启用。
You can remove all unneeded capabilities from the permitted set, such that they cannot be regained.
可以从允许集中删除所有不需要的能力，这样就无法恢复这些能力。
Until now, we have asserted the desired capabilities in the permitted set but not the inheritable set.
到目前为止，我们已经在允许集中设置了所需的能力，但是还没有在可继承集中设置。
The file inheritable set specifies which of the process's inheritable capabilities can be in the process's new permitted set.
文件可继承集决定进程的哪些可继承能力可以放在新的进程允许集中。
The file inheritable set is the set that can be inherited from the parent process's inheritable set into its new permitted set.
文件可继承集中的能力可以从父进程的可继承集继承到新的允许集。
Finally, since the effective bit is on, the task's new effective set will contain both the bits that are in its new permitted set.
最后，因为设置了有效位，新的任务有效集将包含新允许集中的两个能力。
The process can change the contents of the effective set at any time as long as the effective set does not exceed the permitted set.
只要有效集不超过允许集的范围，进程任何时候都可以修改有效集的内容。
The capability types represent inheritable and permitted sets, respectively, and separate capability lists can be specified for each set.
能力类型分别代表可继承集和允许集，可以为每个集指定单独的能力列表。
If only cap_dac_override is in the file inheritable set, then only that capability can be inherited into the process's new permitted set.
如果文件可继承集中只有cap _ dac_override，那么只能将这个能力继承到新的进程允许集中。
The -e or -d flag dictates whether the capabilities in the permitted set are in the program's effective set on startup or not, respectively.
e或- d标志分别表示允许集中的能力在启动时是否在程序的有效集中。
You can remove the capabilities from the effective set but retain them in the permitted set to prevent inadvertent abuse of the capabilities.
可以将能力从有效集(effectiveset)中删除，但是保留在允许集(permitted set)中，从而防止滥用能力。
The new permitted set is taken as a union of the file's permitted set and the result of intersecting the file's and process's inheritable sets.
新的允许集是文件的允许集与文件和进程的可继承集的交集合并的结果。
If it is compromised, the attacker can use only the capabilities present in the effective set, or, with a call to cap_set_proc (3), in its permitted set.
如果攻击者突破了这个程序，他也只能使用有效集中的能力；即使调用了cap_set _ proc(3)，也只能使用允许集中的能力。
Under a law passed in 2003, foreign universities were permitted to set up campuses, or whole universities, inside China, if they partnered with a local body.
根据2003年通过的一项法律，外国大学将被允许在中国建设分校或开办完全的大学，前提是要与当地大学合作。
The process's effective set is the conjunction of the new permitted and file effective sets.
进程的有效集是新的允许集和文件有效集的交集。
If any flag in cap_p is set for any capability not currently permitted for the calling process, the function will fail, and the capability state of the process will remain unchanged.
如果对调用进程中不允许的能力设置cap _ p的任何标志，那么这个函数就会失败，进程的能力状态保持不变。
By specifying -c all=p, we asked for a fully populated permitted, or forced, capability set on /usr/bin/at.
通过指定 -c all=p，我们请求在 /usr/bin/at 上设置包含所有能力的允许能力集。
This time, the non-root user has an empty capability set, while the process started as a root user has cap_dac_override in its permitted and effective sets.
这一次，非根用户的能力集是空的，作为根用户启动的进程的允许集和有效集中包含cap _ dac_override。
For a process to keep any capabilities after executing a file, the capabilities must be in the file's permitted or inheritable set.
如果进程要在执行一个文件之后保留任何能力，那么这些能力必须被包含在文件的允许集或可继承集中。
It should be remembered that user-specified transforms are permitted even though a basic default set is specified in the candidate.
应该记住，即使在候选方案中指定了基本预设设定，还是容许使用者指定的转换。
Each predefined role grants authorization for a fixed set of actions that the user is permitted to perform on this business entity, such as claiming a task or getting the process instance data.
每个预定义的角色都为用户对此业务实体执行一组固定操作授予权限，如声明任务或获取流程实例数据。
As it happens, the patent offices have agreed upon a fairly tightly constrained set of permitted image formats and sizes for embedding into the XML application body.
因此，专利机构取得一致意见，对嵌入到XML申请书中的图片格式和大小有严格的限制。
Derives an equation set to reveal the influence of water flow variation on temperature of the heated room and permitted fluctuation of the hydraulic imbalance degree of pipeline.
推导出了水流量变化对供暖房间温度的影响以及管路水力失调度允许波动的取值范围，指出循环水量减小时对室温的影响较水量增加时为大。
She cleaned up the things one morning after he had gone, dressed as neatly as her wardrobe permitted, and set out for Broadway.
一天早晨，他走了以后，她把家里收拾干净，尽自己所有的衣服穿戴整齐，动身去百老汇大街。
Partial shipments shall be permitted upon presentation of the clean set of shipping document.
可以允许分批发货，但须提出一套明确的装运单据。
Attached to each statutory plan is a set of notes indicating the USES in particular zones which are always permitted and those USES for which the TPB's permission must be sought.
每份法定图则均附有一份注释，说明在各个地带上准许的土地用途，以及须向城市规划委员会申请许可的土地用途。
As soon as men decide that all means are permitted to fight an evil, then their good becomes indistinguishable from the evil that they set out to destroy.
如果有人认为为了战胜邪恶可以不择手段，那么他们所谓的善与其试图消灭的恶就没有区别了。
Any other parts of the country, institutions or individuals are not permitted to set up gold trading and gold trading platform.
国内其他任何地方、机构或个人均不得设立黄金交易所及各类黄金交易平台。
Besides, foreign companies are permitted to set up representative offices and certain types of branch entities in China.
此外，外国企业还可以在中国设立常驻代表机构和特殊性质的外国企业分支机构。
Besides, foreign companies are permitted to set up representative offices and certain types of branch entities in China.
此外，外国企业还可以在中国设立常驻代表机构和特殊性质的外国企业分支机构。
应用推荐