The Linux Programming Interface¶
Kerrisk, M. (2010). The Linux Programming Interface. No Starch Press.
Cited by¶
1 citation across 1 artifact.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Principle of Least Privilege
- The minimization rule and temporal scoping together fix this: the daemon binds the port as root (the one moment root is necessary), then immediately calls
setuidto an unprivileged account andchroots into the public directory, dropping every grant its post-startup function does not require.This sourceDocuments binding a privileged port as root then dropping privileges via setuid and chroot to confine a daemon's post-startup authority.
- The minimization rule and temporal scoping together fix this: the daemon binds the port as root (the one moment root is necessary), then immediately calls
Verification¶
This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.
Registry ID ref:bdd1944b56bd · see in the full table