Differences

This shows you the differences between two versions of the page.

--- principles:principle_of_least_privilege [2021-09-02 12:49] – old revision restored (2021-05-11 22:17) 65.21.179.175
+++ principles:principle_of_least_privilege [2021-10-18 22:16] (current) – +++ restored +++ christian
@@ Line 1: / Line 1: @@
 ====== Principle Of Least Privilege ======
-The original formulation is the following: every program and every privileged user of the system should operate using the least amount of privilege necessary to complete the job. From Jerome H. Saltzer in 1974.
 ===== Variants and Alternative Names =====
@@ Line 9: / Line 7: @@
 ===== Context =====
-  * [[contexts:]]
+  * [[contexts:Security]]
 ===== Principle Statement =====
-In a particular abstraction layer of a computing environment, every module (such as a process, a user, or a program, depending on the subject) must be able to access only the information and resources that are necessary for its legitimate purpose.
+Every program and every privileged user of the system should operate using the least amount of privilege necessary to complete the job.
 ===== Description =====
+In a particular abstraction layer of a computing environment, every module (such as a process, a user, or a program, depending on the subject) must be able to access only the information and resources that are necessary for its legitimate purpose.
 ===== Rationale =====
@@ Line 32: / Line 32: @@
 ===== Origin =====
+From Jerome H. Saltzer in 1974.
 ===== Evidence =====
@@ Line 38: / Line 39: @@
 /*  * [[wiki:Proposed]]*/
 /*  * [[wiki:Examined]]*/
-/*  * [[wiki:Accepted]]*/
+  * [[wiki:Accepted]]
 /*  * [[wiki:Questioned]]*/
@@ Line 70: / Line 73: @@
 Discuss this wiki article and the principle on the corresponding [[talk:principles:Principle Of Least Privilege|talk page]].