Everything that the kernel is responsible for was part of a single binary, with no protection between the various parts.

内核所负责的每一个事物都是二进制的一部分，在各个部分之间没有保护。

youdao

A kernel key is a software key that allows the kernel to create data protection classes, regardless of the number of hardware keys available.

内核键是一种软件键，它允许内核创建数据保护类，而无需考虑可用的硬件键的数目。

youdao

If you make a kernel extension key-aware, you must add explicit protection gates, typically at all entry and exit points of your module.

如果您需要使内核扩展成为可识别键的内核扩展，那么您必须添加显式的保护门，通常在您的模块的所有条目和退出点处。

youdao

In addition to checking daily for security updates, Mountain Lion includes app sandboxing to keep misbehaving apps from compromising your system, and kernel ASLR for improved protection against buffer overflow attacks.

ENGADGET: Apple brings Dictation to the Mac, tells Siri to stay in the car

The protection mechanisms that are present in the Windows kernel are rendered less effective inside of a virtual machine as opposed to a physical machine.

FORBES: How Bad Assumptions Are Making Software Less Secure