From owner-freebsd-security@FreeBSD.ORG Thu Jul 17 06:24:30 2008 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 168ED106566B for ; Thu, 17 Jul 2008 06:24:30 +0000 (UTC) (envelope-from freebsd-security@dfmm.org) Received: from dfmm.org (treehorn.dfmm.org [66.180.195.213]) by mx1.freebsd.org (Postfix) with ESMTP id D0D9D8FC08 for ; Thu, 17 Jul 2008 06:24:29 +0000 (UTC) (envelope-from freebsd-security@dfmm.org) Received: (qmail 61863 invoked by uid 1000); 17 Jul 2008 06:24:29 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 17 Jul 2008 06:24:29 -0000 Date: Wed, 16 Jul 2008 23:24:28 -0700 (PDT) From: Jason Stone X-X-Sender: jason@treehorn.dfmm.org To: Matt Reimer In-Reply-To: Message-ID: References: User-Agent: Alpine 1.00 (BSF 882 2007-12-20) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: freebsd-security@freebsd.org Subject: Re: A new kind of security needed X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jul 2008 06:24:30 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Is anyone else nervous trusting all his programs to have access to all > his files? Is there already a reasonable solution to this problem? > > It makes me nervous for, say, Firefox and its plugins to be able to read > and write every file I own, whether it's gnucash, ~/.ssh, or other > sensitive files. Absolutely. Right now, I use different logins for different things (casual web surfing, financial stuff, snd work), but it's inconvenient and far from fullproof. Capabilities or MAC systems could be used here -- someone just has to put in the work to make it happen. -Jason -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) Comment: See https://private.idealab.com/public/jason/jason.gpg iD8DBQFIfuWdswXMWWtptckRAui7AJoDPimy9czlyCRbPcDMTK0XzZ9GIgCg2u0z CQweJjrVQz2fV3xNH5ML50M= =G2pt -----END PGP SIGNATURE-----