354 The BAE/DigitalNet XTS-400’s STOP operating system and Aesec’s GEMSOS operating system provide
discrete software “rings” that are isolated by the kernel’s mandatory access control policy
enforcement; each operating system ring maps one-for-one (in the case of STOP) or two-for-one (in the
case of GEMSOS) into a hardware ring of the underlying Intel chip architecture