| 摘要 |
<p>A computer-implemented method includes initializing a first descriptor table associated with a first permission level and a second descriptor table associated with a second permission level different from the first. The first and second descriptor tables are associated with a hardware processor and initialized by an operating system kernel. In response to a descriptor table address request originating from a software process, a memory address associated with the first descriptor table is provided, while in response to a descriptor table update request, the second descriptor table is updated.</p> |
