Yeah, someone wrote along the lines of "userland sets the rules, the kernel enforces them" which I thought was a neat short version.