Local system security

[Matt McCutchen]

On Wed, 2011-01-05 at 16:13 -0500, Adam Jackson wrote:
> On Wed, 2011-01-05 at 14:10 -0500, Matt McCutchen wrote:
> > On Wed, 2011-01-05 at 11:12 -0500, Adam Jackson wrote:
> > > (And of course what we're doing here is protecting against a malicious
> > > attacker who already has enough privileges to run code on your system,
> > > which means you're pretty far into having already lost.  Meh.)
> > 
> > I've seen this viewpoint a number of places.  IMO, it's a shame that the
> > community seems to be giving up on local system security.  In various
> > situations, it would be quite convenient if I could give other people
> > shell accounts on my machine without risking compromise of all of my
> > data.  The virtualization solutions are more work to set up.
> 
> You're putting words in my mouth just a little.
> 
> The existing discussion was about denial of service attacks.

OK, I misunderstood.  Reading your remark by itself, I thought it
referred to confidentiality and integrity too.

-- 
Matt