I/O Protection

• All I/O instructions are privileged instructions.
• Must ensure that a user program could never gain control of the computer in monitor mode (I.e., a user program that, as part of its execution, stores a new address in the interrupt vector).