特权级介绍（Privilege level presentation）.docVIP

特权级介绍（Privilege level presentation） [recommendation] privilege level (transfer) CPL is the privilege level of the current process (Current, Privilege, Level), the privileged level of the segment of the currently executing code, present in the lower two bits of the CS register. RPL is the process to request permission access section (Request Privilege Level), the segment selector for the segment selector, each have their own RPL, which is the request permission process on the interview, a bit like a function parameter. Moreover, RPL is not fixed for each segment, and the RPL for the two visit is different at the same time. RPL may weaken the role of CPL, such as the current CPL=0 process to access a data segment, which sets the RPL in the segment selector to 3, so that although it still has only 3 privileges for that segment. DPL is stored in the segment descriptor that specifies the permission level (Descriptor, Privilege, Level) to access the segment, and the DPL of each segment is fixed. When the process of access to a period of time, need to process the privilege check, the general requirements of DPL = max {CPL, RPL} Following an analogy, China officers are president of grade 6, 1, 3, 2 Prime Minister governor mayor 4, 5, 6 county mayor, if I is the current process, the level of the prime minister (CPL=2), I went to the city of Liaocheng (DPL=4) (OH), I examine the governor level (RPL=3 it can kill them: -)) to visit, you can, if I use the county level, people will ignore us (you see on TV incognito, ha ha), see! Why use RPL is to take into account the security issues, as if you obviously have a written permission to a file, why read it read-only, open it, not for security! That is to say I should have the right to access it, as to what kind of identity to visit, is another matter. Comprehensive interpretation: -------------------------------------------------------------------------------- RPL is a segment selector inside the bit 0 and bit 1 combinations of th