Questions tagged [privilege-separation]

Privilege separation is the design pattern of breaking a system into components such that each component can be granted a smaller set of permissions than a combined system would need. Thus restricting the capabilities of an attacker who compromises that component.

Filter by
Sorted by
Tagged with
0 votes
0 answers
94 views

Are domain admin credentials cached when entered for approving a software installation?

From what I know, it's a bad practice to login to any workstation or server except domain controllers as a domain admin. I read that mimikatz or other malware can extract the hash of the password from ...
rocky_alpine's user avatar
4 votes
1 answer
267 views

User isolation in LAMP

As I understand, in a typical LAMP (or be it LEPP) setup, all PHP code is executed using the same user and group ("www" or similar). In a multi-user scenario (e.g. some variant of allowing ...
Gamification's user avatar
1 vote
1 answer
352 views

Security difference between changing permissions versus using sudo to execute

If there is a program written by a normal user that requires root privileges (eg. a program that interacts with root processes) what is the difference between running this program using sudo vs. ...
durestudios's user avatar
1 vote
3 answers
2k views

Is there really any benefit in having a separate local admin account

I have been thinking of implementing a new practice where local admin privileges are disabled entirely from all endpoints. For users who need to elevate privileges, they will have a separate admin ...
TheGreyShadow's user avatar
1 vote
0 answers
131 views

Authorise access to hierarchical data

Consider a scenario in which you offer service access based on a hierarchy of authority. i.e., a HEAD can register his subordinates. The authenticated HEAD has the previledge to read and update data ...
Fahim Farook's user avatar
2 votes
1 answer
897 views

Windows service with elevated privileges - Security concern

The company I work at uses a program on their Windows workstations that runs as the logged-in user but some tasks require elevated privileges. The user must be able to run these without having admin ...
etw0's user avatar
  • 55
4 votes
2 answers
173 views

How could malware disable third party security software?

I'm asking this question with the assumption that anything the user can do, so can malware. I'm using a third party firewall on my system to control which programs are able to access the internet. ...
Synthetic Ascension's user avatar
3 votes
2 answers
471 views

Why are Protection Rings called rings?

Protection rings are different privilege levels granted to software, with the kernel being the most privileged, applications the least privileged, and drivers somewhere in between. My question is why ...
LemonPi's user avatar
  • 133
1 vote
2 answers
2k views

Best practice on Windows domains: To have a separate admin account or not?

On Linux, we enforce least privilege through sudo. This gives the best of both worlds: Passwords and accounts are for a person, as they should be, not a role. But we lower risk and exposure by only ...
SRobertJames's user avatar
1 vote
1 answer
106 views

Is it possible to separate DRA decryption abilities?

In the name of separation of duties, I was wondering if there is a simple (or even not-so-simple) way of dividing the ability to decrypt an EFS encrypted file such that it would require two DRAs to ...
Y     e     z's user avatar
8 votes
3 answers
1k views

Difference between root login and passwordless sudo

Cloud images of some popular operating systems do not let the user to log in as root, yet they use a very standard user name (for example ec2-user, ubuntu) and allow these users to use passwordless ...
Julian's user avatar
  • 83
4 votes
1 answer
2k views

Drop privileges after startup or start as unprivileged user?

Given a service that needs access to some secrets from a config file to start, I can imagine three approaches: 1) Keep the file readable only by root. Start the process as root, read the config and ...
thusoy's user avatar
  • 143
2 votes
2 answers
364 views

How does separating concerns into separate processes (without enforcement) help security?

In this talk on privilege separation, Theo de Raadt explains that OpenBSD's ntpd has a master process which calls settimeofday(), a DNS process responsible for querying DNS servers, and an NTP ...
strugee's user avatar
  • 719
3 votes
1 answer
162 views

How can you securely use a cloud-based CI/CD server?

I'm looking at using a cloud-based continuous deployment server to push production code for my application. Because it's a cloud based server, this requires me to give them a private SSH key that has ...
Hetul Patel's user avatar
5 votes
2 answers
245 views

Isn't separating privileges less useful on a PC, as all my critical data is in my normal user account?

Separating privileges, i.e using a non-admin account and escalating only when needed, seems to be something everyone agrees on. I can roughly understand why it's important on every system : prevent an ...
Hey's user avatar
  • 1,955
3 votes
2 answers
4k views

Separation of Duties using RBAC

I'm reading an article about Role based Access Control, in section 6 (Separation of Duties) I didn't understand this part : Separation of duty can be either static or dynamic. Compliance with ...
Bilal's user avatar
  • 133
5 votes
4 answers
3k views

Node.js REST server running as root

I am building a REST API server using Node.js and Express, that will allow you to turn any Linux server into a NAS. I have several fileExec which basically spawns a shell and executes a BASH command (...
InitEnabler's user avatar