Aar  0 U`0`0p P@ P ` `0pHH $ @d HHHHff@  d Footnote TableFootnote**.\t.\t/ - :;,.!?! b  b0TOCHeading1Heading2   BEquationVariables[::=:99;;R<<$monthname> <$daynum>, <$year>"<$monthnum>/<$daynum>/<$shortyear>;<$monthname> <$daynum>, <$year> <$hour>:<$minute00> <$ampm>"<$monthnum>/<$daynum>/<$shortyear><$monthname> <$daynum>, <$year>"<$monthnum>/<$daynum>/<$shortyear> <$fullfilename> <$filename> <$paratext[Title]> <$paratext[Heading1]> <$curpagenum> <$marker1> <$marker2> (Continued)+ (Sheet <$tblsheetnum> of <$tblsheetcount>)Heading & Page <$paratext> on page<$pagenum>Pagepage<$pagenum>See Heading & Page%See <$paratext> on page<$pagenum>. Table All7Table<$paranumonly>, <$paratext>, on page<$pagenum>Table Number & Page'Table<$paranumonly> on page<$pagenum>AHeadings-kHTMLA##%%''AK5y::: 55: 999::::: ::::?:A:C:E:G:I:K:M:O:|:~::::::::::::::::::::::::::::;;;;;!;#;%;';);T;V;X;Z;\;^;`;b;d;f;jWU;;;;;;;;;;;;; ;;;;;;;Wg;;;;;WyW(<<<>>>> > > >>>>>>>>>>!>#>%>'>)>+>->/>1>3>5>7>9>;W>?>A>C>E>G>I>K>M>O>Q>S>U>WRWRXcS}XSXSY_T YsT=Y@@@ZYZ[Z}AA AAA AO'1.Q2.TZZZZQ&3.Q'6a.Q(8b.Q)8c.Q*8d.ZQ,4.Q-6a.Q.8b.Q/8c.Q08d.Q15.Q26a.Q38b.Q46.Q56a.Q68b.Q78c.Q88d.TTTTZTTTTTUUUZUUZZZ U U UUUUUUU UU U"U$U&U(U*U,U.U2U4U6UAUeUU!dqd:d9 HmR9HmRHRHR Footnote Hr@9Hr@HzHz Single LineH靕9Footnote 9  HD9 HDHH Double LineH9 Double Line9 9 H֝9  Single Line9 HZ֝9  TableFootnote EGxR9EGxREPwEPw TableFootnoted5p HH5xHH❝G܁e HH5zHH靕l $$:$$gtG܁Bm V $$:$$靕l} : GeHeadings Table } :  Ge } :  Ge }l: lG eHeading Level HUV 5HUV ❝G܁e HUV 5HUV 靕l H$ 5H$ G܁e H$ 5H$ 靕l HH5HHX> `Notes for November 13, 1998 q܁`Greetings and Felicitations! r`Puzzle of the Day x`Privilege in OSes y`ENone (original IBM OS; protect with password, or anyone can read it) z`-Fence, base and bounds registers; relocation {`Tagged architectures |`NMemory management based schemes: segmentation, paging, and paged segmentation ~` User identification `>Go through UNIX idea of real, effective, saved, audit `BGo through notion of role accounts; cite Secure Xenix, DG, etc. `%Go through PPNs (TOPS-10) and groups `Review least privilege `Privilege in Languages `Nesting program units `"Temporary upgrading of privileges `"Different forms of access control ` UNIX method `"ACLs: describe, revocation issue * )MULTICS rings: ( b 1 ,  b 2 ) access bracket - can access freely; ( b 2 ,  b 3 ) call bracket - can call segment through UUF@gate; so (4, 6, 9) as example Q U`'Capabilities: file descriptors in UNIX HH5HH靕l}: G eParagraph Format }:!G e Comments }l띜: )l띜Ge2 d9#'H$ 9"%H$ $$ 靕l H$ 9"H$ #W܁܁lKNovember 13, 1998 ECS 153 F ALL  1998 Page  [1 \ HUV 9"#'HUV && 靕l HUV 9"HUV ❝%W ܁܁a HH9"%HH(( 靕l HH9"HH❝'W ܁܁` }띜:!*띜띜GUTe Heading1 }띜:)u띜Ge d:8-- $$:9+$$ҝ1a-1XSNID?:50+& }xo l^bf~zvrnjUX[IMQ.14FC@=:7G܁Bm ` _ ^ ] Z W $$:;+$$%,,靕l} :>iT1 jGeCharacter Macros } :@i jGe } :Bi jGe }H:Di.2HjGe Character }:Fi13jGe Replace With }:Hi24jGe Comments }H:Ji35HjGe }:Li46jGe¢ }:Ni5FjGe }H:{i<8HjGe }:}i79jGe... }:i8jGe }H:i?;HjGe }:i:<jGe- }:i;7jG e }H:iB>Hj G!e }:i=?j G"e-- }:i>:j G#e }H:iEAHj G$e }:i@Bj G%e° }:iA=j G&e }H:iHDHj G'e }:iCEj G(e® }:iD@j G)e }H:i6GHj G*e }:iFHj G+e© }:iGCj G,e } :i]M j G-eGeneral Macros } :i j G.e } :i j G/e } :i j G0e }h:iINhjG1e Macro Name }h:iMOhjG2e Replace With }h:iNPhjG3eHead }:iOQjG4e Comments }h:iPRhjG5e }h:iQShjG6e }h:iRThjG7e }:iS.jG8e } ;imX j G9eCross-Reference Macros } ;i j G:e } ;i j G;e };iUYj G<e Macro Name }; iXZj G=e Replace With };"iY[j G>e Comments };$iZ\j G?e See Also };&i[]j G@eSee <$paratext> };(i\Ij GAe } ;S#nb $ GBeSystem Macros } ;U# $ GCe } ;W# $ GDe } ;Y# $ GEe }h;[#^ch$ GFe Macro Name }h;]#bdh$ GGe Replace With }h;_#ceh$ GHeHead }h;a#dfh$ GIe Comments }h;c#egh$ GJe StartOfDoc }h;e#fhh$ GKe }h;g#gih$ gO% <$default���Etitle> }h;i#hh$ GMe }h;iqkhj GQeEndOfLastSubDoc }h;ijlhj GRe }h;ikmhj GSe }h;ilUhj GTe }h;iuohj GUeStartOfLastSubDoc }h;inphj GVe }h;ioqhj gt% <$default���Etitle> }h;ipjhj GXe }h;iyshj GYeEndOfFirstSubDoc }h;irthj GZe }h;isuhj G[e }h;itnhj G\e }h;i}whj G]eStartOfFirstSubDoc }h;ivxhj G^e }h;iwyhj gp% <$default���Etitle> }h;ixrhj G`e }h;i{hj Gae EndOfSubDoc }h;iz|hj Gbe }h;i{}hj Gce }h;i|vhj Gde }h;#h$ GeeStartOfSubDoc }h;#~h$ Gfe }h;#h$ gg% <$default���Etitle> }h;#h$ Ghe }h;#ih$ Gie EndOfDoc }h;#h$ Gje }h;#h$ Gke }h;#~h$ Gle } <#!  $ GveHTML Options Table } <# $ Gwe } <# $ Gxe }< # $ GyeControl }<"# $ GzeValue }H<$# H$ G{e Comments }<&# $ G|e Image Format }<(# $ g}% 0001IMAGGIF E MACP0001GIF }H<*# lH$ G~e } 6$ 'G#eX:Page }H<#57H$ 'G$e See Also }6<#686$ 'G%eN }6<#796$ 'G&eN }<#80$ 'G'e }<#C;$ (G(eX:Heading & Page }H<#:<H$ (G)e See Also }6<#;=6$ (G*eN }6=#<>6$ (G+eN }=#=5$ (G,e }=#H@$ )G-eC:EquationVariables }H=#?AH$ )G.eEM }6=#@B6$ )G/eN }6= #AC6$ )G0eN }= #B:$ )G1e }=#ME$ *G2e C:Emphasis }H=#DFH$ *G3eEM }6=#EG6$ *G4eN }6=#FH6$ *G5eN }=#G?$ *G6e }=#RJ$ +G7eC:Code }H=#IKH$ +G8eEM }6=#JL6$ +G9eN }6=#KM6$ +G:eN }= #LD$ +G;e }="#WO$ ,G<eC:Bold }H=$#NPH$ ,G=eEM }6=&#OQ6$ ,G>eN }6=(#PR6$ ,G?eN }=*#QI$ ,G@e }=,#\T$ -GAeP:Title }H=.#SUH$ -GBeH* }6=0#TV6$ -GCeN }6=2#UW6$ -GDeN }=4#VN$ -GEe },=6#Y,$ .GFe P:TableTitle }H,=8#XZH,,$ .ceLI Ge Parent = OL Ade Depth = 0 }6,=:#Y[6,$ .GHeN }6,=<#Z\6,$ .GIeN },=>#[S,$ .GJe }=@+f^, /GKeP:TableFootnote }H=B+]_H, /GLeP }6=D+^`6, /GMeN }6=F+_a6, /GNeN }=H+`, /GOe }=J+kc, 0GPeP:Rule }H=L+bdH, 0GQeP }6=N+ce6, 0GReN }6=P+df6, 0GSeN }=R+e], 0GTe },=T+ph,, 1GUe P:Numbered1 }H,=V+giH,,, 1aeLI Ve Parent = OL Abe Depth = 0 }6,=X+hj6,, 1GWeN }6,=Z+ik6,, 1GXeN },=\+jb,, 1GYe },=^+um,, 2GZe P:Numbered }H,=`+lnH,,, 2_eLI [e Parent = OL A`e Depth = 0 }6,=b+mo6,, 2G\eN }6,=d+np6,, 2G]eN },=f+og,, 2G^e }=h+zr, 3G_eP:Mapping Table Title }H=j+qsH, 3G`eP }6=l+rt6, 3GaeN }6=n+su6, 3GbeN }=p+tl, 3Gce }=r+w, 4GdeP:Mapping Table Cell }H=t+vxH, 4GeeP }6=v+wy6, 4GfeN }6=x+xz6, 4GgeN }=z+yq, 4Ghe }=|+|, 5GieP:ManHeading2 }H=~+{}H, 5GjeP }6=+|~6, 5GkeN }6=+}6, 5GleN }=+~v, 5Gme }=+ , 6Gne P:ManHeading }H=+H, 6GoeP }6=+6, 6GpeN }6=+6, 6GqeN }=+{, 6Gre }=+, 7Gse P:ManBody }H=+H, 7GteP }6=+6, 7GueN }6=+ 6, 7GveN }=+, 7Gwe },=+ ,, 8Gxe P:LetteredA }H,=+ H,,, 8]eLI ye Parent = OL A^e Depth = 0 }6,=+ 6,, 8GzeN }6,=+ 6,, 8G{eY },=+ ,, 8G|e },=+,, 9G}e P:Lettered }H,=+H,,, 9[eLI ~e Parent = OL A\e Depth = 0 }6,=+6,, 9GeN }6,=+6,, 9GeY },=+ ,, 9Ge }=+, :Ge P:Indented }H=+H, :GeP }6=+6, :GeN }6=+6, :GeN }=+, :Ge }=+", ;GeP:HeadingRunIn }H=+H, ;GeP }6=+6, ;G eN }6=+6, ;G eN }=+, ;G e }=+', <G e P:Heading2 }H=+ H, <G eH* }6=+!6, <GeN }6=+ "6, <GeN }=+!, <Ge }=+,$, =Ge P:Heading1 }H=+#%H, =GeH* }6=+$&6, =GeN }6=+%'6, =GeN }=+&, =Ge }=+1), >GeP:Heading Info }H=+(*H, >GeP }6=+)+6, >GeN }6=+*,6, >GeN }=++#, >Ge }=+6., ?GeP:Hand }H=+-/H, ?GeP }6=+.06, ?GeN }6=+/16, ?GeN }=+0(, ?Ge }=+;3, @G e P:Footnote }H=+24H, @G!eP }6=+356, @G"eN }6=+466, @G#eN }=+5-, @G$e },=+@8,, AG%e P:Exercise }H,=+79H,,, AYeLI &e Parent = OL AZe Depth = 0 }6,=+8:6,, AG'eN }6,=+9;6,, AG(eN },=+:2,, AG)e }=+E=, BG*e P:Due Date }H>+<>H, BG+eP }6>+=?6, BG,eN }6>+>@6, BG-eN }>+?7, BG.e }>+JB, CG/e P:CodeIndent }H> +ACH, CG0eP }6> +BD6, CG1eN }6>+CE6, CG2eN }>+D<, CG3e }>+OG, DG4e P:CodeCenter }H>+FHH, DG5eP }6>+GI6, DG6eN }6>+HJ6, DG7eN }>+IA, DG8e }>+TL, EG9eP:Code }H>+KMH, EG:eP }6> +LN6, EG;eN }6>"+MO6, EG<eN }>$+NF, EG=e }>&+YQ, FG>eP:CellHeading }H>(+PRH, FG?eP }6>*+QS6, FG@eN }6>,+RT6, FGAeN }>.+SK, FGBe }>0+^V, GGCe P:CellBody }H>2+UWH, GGDeP }6>4+VX6, GGEeN }6>6+WY6, GGFeN }>8+XP, GGGe },>:+c[,, HGHe P:Bulleted }H,><+Z\H,,, HWeLI Ie Parent = UL AXe Depth = 0 }6,>>+[]6,, HGJeN }6,>@+\^6,, HGKeN },>B+]U,, HGLe }>D+h`, IGMe P:BodyList }H>F+_aH, IGNeP }6>H+`b6, IGOeN }6>J+ac6, IGPeN }>L+bZ, IGQe }>N+"e, JGRe P:BodyCenter }H>P+dfH, JGSeP }6>R+eg6, JGTeN }6>T+fh6, JGUeN }>V+g_, JGVe d>kk $$>i$$z9kzvrnjUX[IMQ.14FC@=:7$$>i$$%jj靕l}@#m$ KGee!Copy Files Imported by Reference }@#ln$ KGfeN }H@#m^H$ KGge }Z#|p$ LGe C:Subscript }HZ#oqH$ LGeEM }6Z#p 6$ LGeN }lAwslMGke1 }ArtMGl eTitle }AsMGme }lA*vlNGne3 }AuwNGoe Heading2 }AvrNGpe },T#y,$ OGse P:Romanedi }H,T#xzH,,$ OFeLI we Parent = OL A}e Depth = 0 }6,T#y{6,$ OG eN }6,T#z|6,$ OG eN },T#{o,$ OG e },T#~,$ PGe P:Romaned }H,T#}H,,$ PDeLI ue Parent = OL Ave Depth = 0 }6,T#~6,$ PGeN }6,T#6,$ PGeN },T#x,$ PGe }T# $ QGe P:Numbered+ }HT#H$ QGeP }6T#6$ QGeN }6U#6$ QGeN }U#}$ QGe }U#$ RGe P:Lettered+ }HU# H$ RGeP }6U # 6$ RG(eN }6U # 6$ RG)eN }U # $ RG*e }U# $ SG+e P:AnswerA+ }HU# H$ SG,eP }6U# 6$ SG-eN }6U#6$ SG.eN }U#$ SG/e },U#,$ TG0e P:AnswerA }H,U#H,,$ TBeLI je Parent = UL Ate Depth = 0 }6,U#6,$ TG2eN }6,U#6,$ TG3eN },U!# ,$ TG4e }U##$ UG5e P:Answer+ }HU%#H$ UG6eP }6U'#6$ UG7eN }6U)#6$ UG8eN }U+#$ UG9e },U-#*,$ VG:e P:Answer }H,U/#H,,$ V@eLI he Parent = UL Aie Depth = 0 }6,U1#6,$ VG<eN }6,U3#6,$ VG=eN },U5#,$ VG>e }6Z#q!6$ LGeN }Z# $ LGe dLeftd"Rightd ReferenceddHeadingsd+HTMLd#HTMLdiHTML f@D CBodyBody. Ŀ@@ CBody. f@D C.Due DateBody. Ŀ@@ CMapping Table Title. Ŀ@@ CMapping Table Cell. f@N C Numbered N:.\t. Ŀ@@CMapping Table Title. Ŀ@@ CMapping Table Cell. f@ C Indented. "Ŀ@@CMapping Table Cell. Ŀ@@ CMapping Table Cell. Ŀ@@CMapping Table Cell. Ŀ@@ CHeader Double Line. f@T C TableTitleT:Table : .  f@PCTitleBody. f@NE C Numbered1 N:.Numbered. f@ C CellFooting. f@E C BulletedBulleted. f@ C Footnote. Ŀ@@ CFooter. f@T CHeading2Body. f@T C HeadingRunInBody. f@N C Numbered N:.\t. f@D CBodyBody. $f@AE C$. LetteredA A:.Lettered. f@NE C Numbered1 N:.Numbered. f@E CAnswerEmphasisAnswer: Body. f@ C TableFootnote. f@T C TableTitleT:Table : . f@TCHeading1Body. $f@A C$. Lettered A:.\t. f@D C BodyCenterBody. f@ CRule. @   $H.l..... .D.h....Code. Ŀ@@ C $ H l      D h  ManHeading. f@P C Heading InfoBody. f@ C CellHeading. f@H CExerciseBoldH:Exercise . . f@ C CellHeading. f@ C Hand. f@ CCellBody. @   $H.l..... .D.h.... CodeCenter.  f@PCTitleBody. $$f@D CBodyListBody. $@   $H.l..... .D.h.... CodeIndent. Ŀ@@ C ManHeading2. Ŀ@@ C $ H l      D h  ManBody. $$f@E CAnswerAEmphasisAnswer: Body. f@ CCellBody. $f@AE C$. LetteredA A:.Lettered. $$f@D CAnswerA+EmphasisBody. $f@A C$. Lettered A:.\t. 6$f@R C6. Romanedi R:.. f@D CAnswer+EmphasisBody. 6$f@R C6. RomanedR:.. f@ C Numbered+. $f@ C$. Lettered+.  C CC C蜜 C蜜 C C 33CC蜜Emphasis 33CC蜜EquationVariables/Bold  ۸ Code CCC C C Subscript Subscript C蜜 C蜜ThinMediumDoubleThick@ Very Thin H&5H&5H&5H&5H&5Format AH Mapping Table H&5H&5H&5H&5H&5Format BH Mapping Table Mlh pH  hhh    hhhh . KH>D LH66V  띜N!)*h j./0hj123h j456hj789h j:;<h j= > ? h j@ A B h jC D E h jF G H  jI J K L  jMNOPjQRST jUVWjXYZj[\] $^_`a$bcde$fghijjklmjnopqjrstujvwxyjz{|}$~$ $$   K$   !,      ",!!!!!!#,""""""J,## #!#"#%V$&$'$($)$*$&$$+%,%-%.%/%'%$0&1&2&3&4&(&$5'6'7'8'9')'$:(;(<(=(>(*($?)@)A)B)C)+)$D*E*F*G*H*,*$I+J+K+L+M+-+$N,O,P,Q,R,.,$S-T-U-V-W-,/-$X.Y.Z.[.\.0.,]/^/_/`/a/1/,b0c0d0e0f0,20,g1h1i1j1k1,31,l2m2n2o2p242,q3r3s3t3u353,v4w4x4y4z464,{5|5}5~5575,6666686,7777 7,97, 8 8 8 88,:8,99999;9,:::::<:,;;;;;=;,<< <!<"<><,#=$=%=&='=?=,(>)>*>+>,>@>,-?.?/?0?1?A?,2@3@4@5@6@,B@,7A8A9A:A;ACA,B?B@BDB,ACBCCCDCECEC,FDGDHDIDJDFD,KELEMENEOEGE,PFQFRFSFTFHF,UGVGWGXGYG,IG,ZH[H\H]H^HJH,_I`IaIbIcI#I,dJeJfJgJhJ$lKmKnKO$oLpLqL L!LNrMsMtMMuNvNwN,PL$xOyOzO{O|O,QO$}P~PPPPRP$QQQQQSQ$RR R R RTR$ S SSSS,US$TTTTTVT$UUUUU,$U$VVVVVComment9d BlackT!WhiteddARedddŝGreendd BluedCyandMagentad YellowHeader/Footer $1Header/Footer $1Header/Footer $2Header/Footer $2IndexIndexCommentCommentSubjectSubjectAuthorAuthorGlossaryGlossaryEquationEquation Hypertext Hypertext  Cross-Ref Cross-Ref Conditional TextConditional TextPositionFMPrivatePositionFMPrivateRangeEndFMPrivateRangeEndFMPrivate HTML Macro HTML Macro M.Times.P Times-Roman FrameRoman M.Times.B Times-Bold FrameRoman M.Courier.PCourier FrameRoman M.Times.BITimes-BoldItalic FrameRoman M.Helvetica.BHelvetica-Bold FrameRoman M.Times.I Times-Italic FrameRomanRCourier HelveticaBTimes"Regular#Roman MediumBoldRegularItalicgpn 2 $Oàr4aqr  %R=Y3TMT+`oԲpQl=Li5MHN:|YdX 稘:{ԚyM s{q_[M\<8P,lhN hb3ZAKu~ vVf;%