finishing day21: OS protection, seperate os segment and application segment