计算机 操作系统ch2 (13).ppt

Module 14: Protection 第十四章 保护 Goals of Protection 保护目标 Domain of Protection 保护域 Access Matrix 访问矩阵 Implementation of Access Matrix 访问矩阵的实现 Revocation of Access Rights 访问权限的撤回 Capability-Based Systems 基于权限的系统 Language-Based Protection 基于语言的保护 Protection 保护 Operating system consists of a collection of objects, hardware or software. 操作系统由一组对象、硬件或者软件构成。 Each object has a unique name and can be accessed through a well-defined set of operations. 每个对象都具有唯一的名称，并且可以通过一组良好定义的操作访问。 Protection problem - ensure that each object is accessed correctly and only by those processes that are allowed to do so. 保护问题——确认每个对象均被正确的访问、并且只被那些得到授权的进程访问。 Domain Structure 域的结构 Access-right = object-name, rights-set 访问权 = 对象名，权限集where rights-set is a subset of all valid operations that can be performed on the object. 权限集是所有可能作用于某个对象的操作集合的一个子集。 Domain = set of access-rights 域=访问权限的集合 Domain Implementation (UNIX)域的实现(UNIX) System consists of 2 domains 系统由2个域组成: User 用户 Supervisor 管理者 UNIX Domain = user-id 域 ＝ 用户标识 Domain switch accomplished via file system. 域的切换通过文件系统完成。 Each file has associated with it a domain bit (setuid bit). 每一个文件均和一个域的信息位相联系：setuid位。 When file is executed and setuid = on, then user-id is set to owner of the file being executed. When execution completes user-id is reset. 当文件被执行并且setuid = on，于是用户标识被设置成该文件的属主。当执行完之后用户标识被重置。 Domain Implementation (Multics)域的实现(Multics) Let Di and Dj be any two domain rings. 令Di 和 Dj 为任意两个域的环。 If j I ? Di ? Dj Access Matrix 访问矩阵 View protection as a matrix (access matrix) 将保护模型抽象为一个矩阵（访问矩阵） Rows represent domains 行代表域 Columns represent objects 列代表对象 Access(i, j) is the set of operations that a process executing in Domaini can invoke on Objectj 访问条目(i, j)定义了在域Di中执行的进程在调用对象Oj时被允许执行的操作的集合。 Access Matrix 访问矩阵 Use of Access Matrix 访问矩阵的使用 If a process in Domain Di tries to do “op” on object Oj, then “op” must be in the access matrix. 若一个在域Di中的进程试图对对象Oj作操作“op”，“op”必须在访问矩阵中。 Can be expanded to dynamic p