Rule of least privilege
From Wikipedia, the free encyclopedia
The introduction to this article provides insufficient context for those unfamiliar with the subject. Please help improve the article with a good introductory style. |
This article does not cite any references or sources. (April 2008) Please help improve this article by adding citations to reliable sources. Unverifiable material may be challenged and removed. |
The rule of least privilege -- When we allow access to something, we should allow access to only those people who need it and under the context that they need it. Take exactly what access needs to happen and limit it directly to that. Assume that any other access is going to have an exploit around it.