Firefox does not have a well-designed privsep model

Re:Firefox does not have a well-designed privsep model by acobster on Monday June 11, 2018 @03:39PM (#17287780)

privsep? W^X? Can someone post a link or two? :)

[ Parent | on HN ]

Re:Firefox does not have a well-designed privsep model by faho on Monday June 11, 2018 @03:41PM (#17287808)

https://en.wikipedia.org/wiki/W%5EX:

>W^X ("Write XOR Execute"; spoken as W xor X) is a security feature in operating systems and virtual machines. It is a memory protection policy whereby every page in a process's or kernel's address space may be either writable or executable, but not both.

"privsep" stands for "privilege separation", which is fairly self-explanatory. See https://en.wikipedia.org/wiki/Privilege_separation.

[ Parent | on HN ]

Re:Firefox does not have a well-designed privsep model by blattimwind on Monday June 11, 2018 @04:03PM (#17288015)

> privsep?

Have different processes / tasks do different things using different privileges.

Example: parsing HTML does not require access to the file system or graphics APIs. So you could parse HTML in a process that is allowed neither. If someone exploits your HTML parser, they can't do much.

[ Parent | on HN ]

Re:Firefox does not have a well-designed privsep model by pvg on Monday June 11, 2018 @03:40PM (#17287803)

Privilege separation and Write XOR Execute. Both have Wikipedia pages.

[ Parent | on HN ]