Re:Firefox does not have a well-designed privsep model
by jchw on Monday June 11, 2018 @05:22PM
(#17288713)
To be more particular, though:
- W^X defends against a subset of attacks that privsep defends against.
- Privsep is a bigger architectural impact than W^X. The entire app, almost everything, is impacted by privsep. Only the JIT is impacted by W^X.
So while it is nice that Firefox has been doing W^X, it doesn't mean they're closer to huge steps like Chrome-level privsep of processes. I hope they are, though.
- W^X defends against a subset of attacks that privsep defends against.
- Privsep is a bigger architectural impact than W^X. The entire app, almost everything, is impacted by privsep. Only the JIT is impacted by W^X.
So while it is nice that Firefox has been doing W^X, it doesn't mean they're closer to huge steps like Chrome-level privsep of processes. I hope they are, though.