4 篇博文 含有标签「新操作系统」

These are the current theories and hypotheses (in a slightly more scientific meaning of the words) influencing the design and implementation of the 3L Project's development. They are just theories and hypotheses and are not set in stone. Most will probably change and be adjusted to match newly gained knowledge, viewpoints, and understandings. Note that many of these hypotheses are built on top of the core system and do not have to be followed or used. The system allows developing completely different systems based on completely different ideas. Hypotheses are generally not proven. Theories have been proven but solutions will likely change. There is no particular ordering to the listings.

这些是目前影响 3L 项目开发的设计和实现的理论和假设（一种稍微更科学的说法）。 它们只是理论和假设，并不是一成不变的。大多数可能会改变和调整，以适应新获得的知识、观点和理解。 请注意，许多假设都是建立在核心系统之上的，不必遵循或使用。 该系统允许基于完全不同的想法来开发完全不同的系统。 假设通常无法得到证明。理论已经被证明，但是解决方案可能会改变。这些清单并没有特别的顺序。

For questions, suggestions, and feedback send an email to the 3L Project hackers list.

如有疑问、建议和反馈，请发送电子邮件到 3L 项目的 Hackers List。

3L is really just a single Lisp program. There is only one address space and one runtime that everything else runs inside of. We can do this securely because the language runtime provides and enforces "first class environments". An environment is an object containing references to resources available in the system. It's like running a program but the program doesn't choose what libraries or hardware resources it has access to. Instead programs are run inside their own environment that provides bindings to things it is allowed to use. If you don't want a program to access the network then run it inside of an environment that has no network bindings. If the program calls a function that interacts with the network that function won't be defined in its environment and an exception will be triggered. This mechanism provides for a very robust, fine-grained, comprehensive, and simple security system.

3L 实际上只是一个 Lisp 程序。只有一个地址空间和一个运行时，其他所有的东西都在其中运行。 我们可以安全地做到这一点，因为语言运行时提供并施行“头等环境”。环境是一个对象，它包含对系统中可用资源的引用。 就像运行一个程序，但是该程序并不选择它可以访问的库或硬件资源。相反的是，程序运行在属于自己的环境之中， 该环境提供了对允许使用的东西的绑定。如果你不想让程序访问网络，那就在一个没有网络绑定的环境中运行它。 若是程序调用一个与网络交互的函数，该函数将不会在其环境中定义，并且会触发一个异常。 该机制提供了一个非常健壮、细粒度、全面和简单的安全系统。

译注：头等环境，即将环境作为操作系统的头等公民， 与之对等的概念是编程语言中的头等函数。

Understandably the most frequent question with regards to the 3L Project is why do we need a new OS? The answer lies in the history of the mini and micro computer and the momentum behind supporting legacy software.

可以理解，有关 3L 项目 的最常见问题是「为什么我们需要一个新的操作系统？」。 其答案存在于迷你和微型计算机的历史，以及支持传统软件的推力之中。