OS must protect itself from user programs while protecting programs from each other. It may or may not protect user programs from the OS.
- Memory-management hardware provides memory protections: page table pointers, page protection, segmentation, translation lookaside buffer (TLB)
- Manipulating memory-management hardware uses 🚑 Privileged Instructions