2 Repos
The practice of dividing a program into parts that run with different privilege levels to limit potential damage from a compromise.
Distinct from User Privilege Configurations: Candidates focus on account management or root file access, not the architectural separation of privileges between worker processes.
Explore 2 awesome GitHub repositories matching operating systems & systems programming · Process Privilege Separation. Refine with filters or upvote what's useful.
This project is a portable implementation of the secure shell toolset designed for deployment across diverse operating systems and platforms. It provides a suite of tools for secure remote login and command execution based on the secure shell protocol. The implementation includes a sandboxed server that isolates processes to limit the impact of potential vulnerabilities on the host operating system. It also functions as a cryptographic key manager for generating and storing security keys to replace or supplement password-based authentication. The project covers encrypted file transfer for mo
Uses a privilege-separated process model to isolate privileged parents from unprivileged children.
Kore is an event-driven web and WebSocket server framework designed for building high-performance web services and APIs in C or Python. It functions as a secure, concurrent application framework that utilizes non-blocking I/O and isolated worker processes to handle high-concurrency traffic. The project is distinguished by a security-first architecture that features OS-level process sandboxing, privilege separation, and the isolation of private encryption keys into dedicated processes. It enables zero-downtime deployments through dynamic module hot-reloading and provides automated TLS certific
Sets the root directory and system user for individual worker processes to improve security.