Differences

This shows you the differences between two versions of the page.

--- principles:principle_of_least_privilege [2020-12-10 07:54] – old revision restored (2020-10-12 16:29) 95.216.172.175
+++ principles:principle_of_least_privilege [2021-10-18 22:16] – old revision restored (2017-11-19 21:41) christian
@@ Line 1: / Line 1: @@
 ====== Principle Of Least Privilege ======
-The original formulation is the following: every program and every privileged user of the system should operate using the least amount of privilege necessary to complete the job. From Jerome H. Saltzer in 1974.
 ===== Variants and Alternative Names =====
@@ Line 9: / Line 7: @@
 ===== Context =====
-  * [[contexts:]]
+  * [[contexts:Security]]
 ===== Principle Statement =====
-In a particular abstraction layer of a computing environment, every module (such as a process, a user, or a program, depending on the subject) must be able to access only the information and resources that are necessary for its legitimate purpose.
+Every program and every privileged user of the system should operate using the least amount of privilege necessary to complete the job.
 ===== Description =====
+In a particular abstraction layer of a computing environment, every module (such as a process, a user, or a program, depending on the subject) must be able to access only the information and resources that are necessary for its legitimate purpose.
 ===== Rationale =====
@@ Line 32: / Line 32: @@
 ===== Origin =====
+From Jerome H. Saltzer in 1974.
 ===== Evidence =====
@@ Line 38: / Line 39: @@
 /*  * [[wiki:Proposed]]*/
 /*  * [[wiki:Examined]]*/
-/*  * [[wiki:Accepted]]*/
+  * [[wiki:Accepted]]
 /*  * [[wiki:Questioned]]*/