Review: Venema98

• Solutions

  • Break single monolithic setuid root process into family of mutually distrusting communicating processes each of which operate at least privilege
  • No setuid programs
  • No /tmp race conditions
  • No remote data in shell variables

Previous slide

Next slide

Back to first slide

View graphic version