EXECUTING FUNCTIONS OF A SECURE PROGRAM IN UNPRIVILEGED MODE

摘要

Executing functions of a secure program in unprivileged mode. A program may be executed in a supervisory mode. The program may call multiple functions. Each function may be executed in a unprivileged mode. Additionally, each function may be executed in a respective constrained environment or sandbox. Each constrained environment may be dedicated to or customized for the respective function. For example, each constrained environment may have a set of privileges that are based on the respective function executing within the constrained environment.