Re:Firefox does not have a well-designed privsep model
by blattimwind on Monday June 11, 2018 @04:03PM
(#17288015)
> privsep?
Have different processes / tasks do different things using different privileges.
Example: parsing HTML does not require access to the file system or graphics APIs. So you could parse HTML in a process that is allowed neither. If someone exploits your HTML parser, they can't do much.
Have different processes / tasks do different things using different privileges.
Example: parsing HTML does not require access to the file system or graphics APIs. So you could parse HTML in a process that is allowed neither. If someone exploits your HTML parser, they can't do much.