The process can usefully be thought of in terms of the gradual emergence of two somewhat separate features: the self as a subject, and the self as an object.
这一过程会逐渐形成两种稍有不同的特征：主体自我和客体自我。
2
Whenever users try to access an object through subject, the kernel verifies the subject domains before granting access to an object.
每当用户尝试通过主题访问对象时，此内核会在赋予对此对象的访问权限之前先验证这些主题域。
3
Then only user will be allowed to access object through the subject.