Use of access matrix(cont)(存取矩阵的使用续) ° Access matrixⅸ design separates mechanism from policy.(存取矩 阵的设计使得机制与策略相分离) Mechanism(机制) Operating system provides Access-matrix rules. (Bi 作系统提供存取矩阵和规则) If ensures that the matrix is only manipulated by authorized agents and that rules are strictly enforced. 存取矩阵仅被授权的智能体操纵,并且规则被严格的遵 守) Policy(策略) User dictates policy.(用户授予策略) Who can access what object and in what mode.(谁能 在哪种模式下访问那一个对象) Applied Operating System Concepts Silberschatz, Galvin, and Gagne @199918.8 Silberschatz, Galvin, and Gagne ©1999 Applied Operating System Concepts Use of Access Matrix (Cont.)（存取矩阵的使用 续） • Access matrix design separates mechanism from policy.（存取矩 阵的设计使得机制与策略相分离） – Mechanism （机制） Operating system provides Access-matrix + rules.（操 作系统提供存取矩阵和规则） If ensures that the matrix is only manipulated by authorized agents and that rules are strictly enforced.（ 存取矩阵仅被授权的智能体操纵，并且规则被严格的遵 守） – Policy（策略） User dictates policy.（用户授予策略） Who can access what object and in what mode.（谁能 在哪种模式下访问那一个对象）