Mozilla 2/Protected mode: Difference between revisions

Line 12: Line 12:
Integrity is a new Windows security concept introduced with Windows Vista. Securable objects within the system, including processes and their associated windows, directories and files, and registry keys, are associated with one of a limited set of integrity levels. These integrity restrictions are independent of user level security restrictions.
Integrity is a new Windows security concept introduced with Windows Vista. Securable objects within the system, including processes and their associated windows, directories and files, and registry keys, are associated with one of a limited set of integrity levels. These integrity restrictions are independent of user level security restrictions.


In general, Integrity applies the general rule of "no write-up", implying objects with lower integrity do not have write access to objects with higher integrity. In addition, objects running at much lower integrity levels often have "no read-up" rules applied for high integrity objects which restrict access completely.
In general, Integrity applies the general rule of "no write-up", implying objects with lower integrity do not have write access to objects with higher integrity. In addition, objects running at much lower integrity levels often have "no read-up" rules applied for higher integrity objects which restrict access completely.


Firefox 2.0 currently runs at the default "medium" integrity level. The goal is to add support for running at both low and medium integrity without adversely effecting the browser's usability or user experience. The decision of which integrity level Fx runs at would be left to the user through a user pref or command line option.
Firefox 2.0 currently runs at the default "medium" integrity level. The goal is to add support for running at both low and medium integrity without adversely effecting the browser's usability or user experience. The decision of which integrity level Fx runs at would be left to the user through a user pref or command line option.
Confirmed users
1,982

edits