Tag
privilege-separation
- Jun 27, 2026 The Close-on-Exec Race and Why Descriptor Inheritance Is a Hazard How exec preserves every descriptor a process holds, why setting the flag after fork is too late, and what O_CLOEXEC closes that fcntl cannot. computing history
- Dec 12, 2024 Trust Boundaries in Data Flow Diagrams and Where Threats Localize How a data flow diagram encodes trust as lines rather than prose, why a boundary is only real where a principal loses authority, and how moving one line changes the entire threat list. security
- Aug 23, 2023 How Capability Sets Split Root Authority The five capability sets a Linux process carries, the transitions between them at exec, and why dropping a capability is not the same as dropping a file permission. virtualization