3 ms·
Even worse is the security model of Unix: Users are considered a threat and are isolated, code is seen as trusted by the user and exploits are not considered.
by legulere 7y ago
Even worse is the security model of Unix: Users are considered a threat and are isolated, code is seen as trusted by the user and exploits are not considered.
The reality today are single user systems (And even if there are users, like for web services, the Unix user system is not used), where the code often cannot be trusted and almost always is exploitable.
- rebolek 7y agoThe problem is not Unix security model, but that it's not used. Even if there is one physical user, there are/should be tons of others, separated.
- nabla9 7y agoIf that's your worry, look at OpenBSD.
- deleted 7y ago[deleted]
- legulere 7y agoIt's a step in the right direction, but it's not as good as it could be, because it's hindered by compatibility with unix. A native process on its own can't do much harm. Only with syscalls can it access other processes, the network, hardware, files, etc. Executing some random code shouldn't be dangerous.