Page 109 - slides.dvi
P. 109

•
                                                                                                 •
                      •
                                                                              •
                                                                                          •
                                                                       •
               •
                                                           1.
                             –
                                   –
                                                3.
                                                      2.
                                                                                          if
                                                                              for
                                                                                                        Often
   Operating
                                                                  On
                                                                       e.g.
                                         most
                                                                                     cycle
                                                set
                                                                                                               Access
                      access
                                                                                                 system
                                                                                          ACLs
                                   when
                                                                  first
                             when
   Systems
                                                                                                        used
                                                      check
                                                                                     (or
                                                up
                                                                              higher
   —
               sometimes
                                                                                                        in
                                                           interrupt
                                   file
                                                                       Multics:
                             code
                                                      ACL
                                         systems
                      control
                                                                                          stored
                                                                              duty
                                                                                                 naming
               even
   Protection
                                                                                                               Control
                             file
                      by
                                                                                          on
                                                                  reference
                                                segment
                                                                       open
                                                                                                        storage
                             is
                                   opened
                                         check
               this
                                                                  to
                                                                              cycle
                                                           (segment
                                                                                     performance
                             to
                                                                                          disk
                                                                       file
                                   for
                                                                                                 scheme
                                                                                                               Lists
                                         ACL
                                                                       =
               isn’t
                             be
                                                                                     will
                      program
                                                                                          but
                                                                              must
                                                           fault)
                                                                                                        systems:
                                   read
                                                descriptor
                                                                  segment:
                                   or
                                                in
                                                                                                 provides
                                                                                          check
                                                                              cache
                      allows
                                                                                     suffer)
               enough
                                                                       memory
                                                                                          is
                             executed
                                                                                                 for
                                   write
               (e.g.
                                                                              results
                                                segment
                                                                                                 ACL
                                                                                          made
                      arbitrary
                                                                              of
                                                                       segment.
                                                                                          in
                                                                                                 to
               MAC)
                                                table
                                                                                                 be
                                                                              check
                      policies
                                                                                          software
                                                                                                 inserted
                                                                                          ⇒
                      (see.
                                                                                                 in
                      e.g.
                                                                                          must
                      Unix
                                                                                                 naming
                                                                                          only
                                                                                          use
                      later)
                                                                                                 path,
                                                                                          on
                                                                                                 e.g.
                                                                                          low
                                                                                                 files
   105
                                                                                          duty
   104   105   106   107   108   109   110   111   112   113   114