Privilege revocation (computing)

Privilege revocation is the act of an entity giving up some, or all of, the privileges they possess, or some authority taking those (privileged) rights away.

For the legal term, see Privilege revocation (law).

Information theory

Honoring the Principle of least privilege at a granularity provided by the base system such as sandboxing of (to that point successful) attacks to an unprivileged user account helps in reliability of computing services provided by the system. As the chances of restarting such a process are better, and other services on the same machine aren't affected (or at least probably not as much as in the alternative case: i.e. a privileged process gone haywire instead).

Computer security

In computing security privilege revocation is a measure taken by a program to protect the system against misuse of itself.

Privilege revocation is a variant of privilege separation whereby the program terminates the privileged part immediately after it has served its purpose. If a program doesn't revoke privileges, it risks the escalation of privileges.

Revocation of privileges is a technique of defensive programming.

gollark: AA ISP here, except their prices are kind of bad.
gollark: There's also fairly consistent mobile network coverage on a bunch of networks, but it is *also* somewhat slow and has data caps.
gollark: Or Openreach or something? In any case, prices are okay and you can choose from a bunch of providers, but they all use the same bad infrastructure.
gollark: Most rural areas, like where I am, only have VDSL lines from BT.
gollark: > do people have these problems in other countries?In the UK, we have *different* problems.

References
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.