fcambuson Lobsters • Recommends
Theo de Raadt - Privilege Separation and Pledge (dotSecurity 2016)
0:00 / 0:00
#openbsd#pledge#privilegeseparation
dotSecurity 2016 - Theo de Raadt - Privilege Separation and Pledge
dotconferences
23K subscribers • 8 videos on Hallway
- Recommended by 1 person: 1 on Lobsters.
- Presented by Theo de Raadt, founder of OpenBSD
Intermediate. Assumes working knowledge.
15K views10 years ago1 recommendation
SecuritySystems programmingOperating systemsWeb and application security
Theo de Raadt explains privilege separation and the development of the pledge system call in OpenBSD to restrict process capabilities.
Filmed at 2016.dotsecurity.io on April 22nd in Paris. More talks on thedotpost.com Privilege separation is a programming technique which splits a program into distrinct units. Each unit then performs part of the task, but in a distinct security domain. Theo presents the recent development of the pledge(2) subsystem in OpenBSD which led to some surprising advances in this technique.Why it's here
1 person recommends thisWhat people say. Recommended as a great introduction to OpenBSD's pledge system call and privilege separation techniques.