Printable View
I am currently learning C++ at college, and can't seem to get anyone to explain what principal of least privilege means. My text refers to it, but there is never a point where it is actually defined. Can anyone help me with this question please.
Thanks!
From: /www.cs.cornell.edu/people/vickyw/lecNotes/Lec3.html
Quote:
Principle of Least Privilege
The Principle of Least Privilege dictates that each task, process, or user (generically referred to as a subject or a principal) is granted exactly those rights needed to perform its job. In spy movies, following the Principle of Least Privilege is equivalent to operating on a need-to-know basis.
To create a system that follows the Principle of Least Privilege, you must determine what the subjects are, what set of privileges should be given to each subject, and how/when should the set change. Often, a set of privileges will change based on the corresponding subject's previous actions (such as file accesses) or on the context (such as which machine is being used.)
Every real-world system violates the Principle of Least Privilege, since regulating every bit and every instruction is not reasonable. Real systems, however, do practice the Principle of Least Privilege at a higher level. For example, if complete mediation is done, then every access to every object is checked.
In accordance with the Principle of Least Privilege, failsafe defaults require explicit permission before an access is granted. This method detects permission errors automatically, since denial of legitimate access will cause complaints.
Separation of Privilege facilitates the Principle of Least Privilege by requiring each privilege to have a distinct key/means of access.
In laymans terms the principle of least priviledge boils down to several simple rules.
1) Make class member private unless you can PROVE they NEED to be otherwise.
2) Use const wherever possible. There is an argument going on as to whether by value params should be const. I believe they should. Herb sutter disagrees. Up to you I guess.
3) Keep scopes small.