Linked by Hadrien Grasland on Sat 25th Jun 2011 08:55 UTC, submitted by John
Permalink for comment 478638
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
Features
Linked by Thom Holwerda on 05/21/13 21:38 UTC
Linked by Thom Holwerda on 05/20/13 11:29 UTC
Linked by Thom Holwerda on 05/18/13 21:33 UTC
Linked by David Adams on 05/16/13 4:23 UTC
Linked by Thom Holwerda on 05/11/13 21:41 UTC
Linked by Thom Holwerda on 05/08/13 14:22 UTC
Linked by Thom Holwerda on 05/02/13 15:28 UTC
Linked by Thom Holwerda on 04/29/13 21:06 UTC
Linked by Thom Holwerda on 04/24/13 22:24 UTC
Linked by Thom Holwerda on 04/18/13 11:21 UTC
More Features »
Sponsored Links



Member since:
2011-01-28
Neolander,
Those things would be practically free (given the ability to sandbox an app in the first place). So it makes so little sense that we're not doing those things today. They're obvious improvements to typical security models in use today.
Operating systems also need to do a better job of managing fine grained access.
On one system after an upgrade, I was troubleshooting a mysql issue. It would fail for no apparent reason - it indicated a file didn't exist, but it did and was owned by mysql. I ran strace against mysql, and to my surprise linux was reporting that the file didn't exist. I was extremely frustrated and straced mysql as root, which worked fine. Long story short, unbeknown to me, ubuntu's "apparmor" package made the file inaccessible to mysql. I admit inexperience with apparmor, however the level of grief caused by it was totally unacceptable. A normal user might have given up and run mysql as root.
I know there's a delicate balance to be reached somewhere, but the simple rules described by Neolander would go a long way to improving usability and security.