3 ms·
privsep? W^X? Can someone post a link or two? :)
by acobster 8y ago
privsep? W^X? Can someone post a link or two? :)
- pvg 8y agoPrivilege separation and Write XOR Execute. Both have Wikipedia pages.
- faho 8y agohttps://en.wikipedia.org/wiki/W%5EX https://en.wikipedia.org/wiki/W%5EX: >W^X ("Write XOR Execute"; spoken as W xor X) is a security feature in operating systems and virtual machines. It is a memory protection policy whereby every page in a process's or kernel's address space may be either writable or executable, but not both. "privsep" stands for "privilege separation", which is fairly self-explanatory. See https://en.wikipedia.org/wiki/Privilege_separation https://en.wikipedia.org/wiki/Privilege_separation.
- blattimwind 8y ago> privsep? Have different processes / tasks do different things using different privileges. Example: parsing HTML does not require access to the file system or graphics APIs. So you could parse HTML in a process that is allowed neither. If someone exploits your HTML parser, they can't do much.