What sort of attacks or hacking can Process Rights Management address?
Because Process Rights Management puts limits on the rights of any process, regardless of the user associated with the running process, a hacker who gains control over an application is similarly restricted. A good example of this is a Web server. Normally on a UNIX system, Web servers must run as the “root” user (the system superuser) because of their usual requirement to connect to TCP port 80 (the privileged Web port). This means that the Web server is a great target for attacks; hackers can often gain full access to a server as the “root” user through a buffer stack overflow or other attack. With Process Rights Management, the Web server can be granted just one privilege other than that of a normal user—the ability to open a privileged port; a hacker will find they do not have additional privileges and thus cannot modify the security on the system or bypass it to access critical or private system resources. Another good example is the Solaris Containers model. The groundbreaking So
Because Process Rights Management puts limits on the rights of any process, regardless of the user associated with the running process, a hacker who gains control over an application is similarly restricted. A good example of this is a Web server. Normally on a UNIX system, Web servers must run as the “root” user or superuser in order to connect to TCP Port 80 (the Web port). This means that the Web server is a great target for attacks; hackers can often gain full access to a server as the “root” user through a buffer stack overflow or other attack. With Process Rights Management, a hacker cannot modify the security on the system or bypass it to access critical or private system resources. Another good example is the Solaris Containers model. The groundbreaking Solaris Containers technology enables users to create thousands of secure, fault-isolated containers within a single Solaris 10 OS instance. Solaris Containers are isolated from each other so that users or applications in one co
