Least privilege - Revision history

MediaWiki spam cleanup: Reverting to last version not containing links to www.textnotace.com

2009-05-27T18:30:14Z

Reverting to last version not containing links to www.textnotace.com

Deleted user at 18:37, 22 May 2009

2009-05-22T18:37:26Z

KirstenS at 00:04, 8 April 2009

2009-04-08T00:04:34Z

KirstenS at 12:27, 7 April 2009

2009-04-07T12:27:13Z

KirstenS: /* References */

2008-09-07T12:39:57Z

‎References

KirstenS at 12:39, 7 September 2008

2008-09-07T12:39:41Z

KirstenS at 18:56, 5 September 2008

2008-09-05T18:56:45Z

Cduffey346 at 01:26, 2 July 2008

2008-07-02T01:26:57Z

Cduffey346: Added template, and related controls

2008-06-17T00:38:06Z

Added template, and related controls

Jeff Williams at 01:04, 16 June 2006

2006-06-16T01:04:50Z

← Older revision		Revision as of 18:30, 27 May 2009
Line 1:		Line 1:
−	~~http://www.textnotace.com~~
	{{Template:Principle}}		{{Template:Principle}}

← Older revision		Revision as of 18:37, 22 May 2009
Line 1:		Line 1:
		+	http://www.textnotace.com
	{{Template:Principle}}		{{Template:Principle}}

← Older revision		Revision as of 00:04, 8 April 2009
Line 39:		Line 39:
	==Related [[Controls]]==		==Related [[Controls]]==

−	* [[Access control]]
	* [[Authorization]]		* [[Authorization]]

@@ Line 5: / Line 5: @@
 <br>
 [[Category:OWASP ASDR Project]]
 ==Description==

← Older revision		Revision as of 12:39, 7 September 2008
Line 49:		Line 49:
	* [http://web.mit.edu/Saltzer/www/publications/protection/ The Protection of Information in Computer Systems]		* [http://web.mit.edu/Saltzer/www/publications/protection/ The Protection of Information in Computer Systems]

−	[Category:Principle]]	+	[[Category:Principle]]

← Older revision		Revision as of 12:39, 7 September 2008
Line 48:		Line 48:

	* [http://web.mit.edu/Saltzer/www/publications/protection/ The Protection of Information in Computer Systems]		* [http://web.mit.edu/Saltzer/www/publications/protection/ The Protection of Information in Computer Systems]
		+
		+	[Category:Principle]]

← Older revision		Revision as of 18:56, 5 September 2008
Line 2:		Line 2:

	{{Template:Stub}}		{{Template:Stub}}
		+
		+	<br>
		+	[[Category:OWASP ASDR Project]]
		+	[[ASDR Table of Contents]]__TOC__
		+

	==Description==		==Description==

@@ Line 6: / Line 6: @@
 The principle of least privilege recommends that accounts have the least amount of privilege required to perform their business processes. This encompasses user rights, resource permissions such as CPU limits, memory, network, and file system permissions.
 ==Examples==
-===Short example name===
+===Administrative Priviledges Granted to a Middleware Server===
-: A short example description, small picture, or sample code with [http://www.site.com links]
+: For example, if a middleware server only requires access to the network, read access to a database table, and the ability to write to a log, this describes all the permissions that should be granted. Under no circumstances should the middleware be granted administrative privileges.
-===Short example name===
+===Connecting to the Database as Root===
-: A short example description, small picture, or sample code with [http://www.site.com links]
+: In this example PHP code, only a SELECT statement from the database is issued. There is no reason to connect to the database as root. Instead, a user should be created with only the necessary access to the database that can be used to perform the SELECT query.
 ==Related [[Vulnerabilities]]==
-* [[Vulnerability 1]]
+* [[Failure to drop privileges when reasonable]]
-* [[Vulnerabiltiy 2]]
+* [[Failure to check whether privileges were dropped successfully]]
@@ Line 33: / Line 42: @@
 ==References==
-* http://www.link1.com
+* [http://web.mit.edu/Saltzer/www/publications/protection/ The Protection of Information in Computer Systems]

@@ Line 1: / Line 1: @@
 {{Template:Principle}}
 ==Overview==
@@ Line 5: / Line 7: @@
 The principle of least privilege recommends that accounts have the least amount of privilege required to perform their business processes. This encompasses user rights, resource permissions such as CPU limits, memory, network, and file system permissions.
 For example, if a middleware server only requires access to the network, read access to a database table, and the ability to write to a log, this describes all the permissions that should be granted. Under no circumstances should the middleware be granted administrative privileges.