Confirmed users
1,982
edits
Line 14: | Line 14: | ||
In general, Integrity applies the general rule of "no write-up", implying objects with lower integrity do not have write access to objects with higher integrity. In addition, objects running at much lower integrity levels often have "no read-up" rules applied for higher integrity objects which restrict access completely. | In general, Integrity applies the general rule of "no write-up", implying objects with lower integrity do not have write access to objects with higher integrity. In addition, objects running at much lower integrity levels often have "no read-up" rules applied for higher integrity objects which restrict access completely. | ||
Firefox 2.0 currently runs at the default "medium" integrity level. The goal is to add support for running at both low | Firefox 2.0 currently runs at the default "medium" integrity level. The goal is to add support for running at both medium and low integrity levels without adversely effecting the browser's usability or user experience. The decision of which integrity level Fx runs would be left to the user through a user pref or command line option. | ||
Three broad goals summarize the work required: | Three broad goals summarize the work required: | ||
* Research the areas of the Mozilla codebase which | * Research the areas of the Mozilla codebase which would be affected by applications running at a "low" integrity. | ||
* Add support for a medium integrity launch shim ("broker") for Firefox. (bug 396196) | * Add support for a medium integrity launch shim ("broker") for Firefox. (bug 396196) | ||
* Augment the functionality of the broker to support a low integrity instance of Firefox which can interact with the os and applications running at higher integrity levels.. | * Augment the functionality of the broker to support a low integrity instance of Firefox which can interact with the os and applications running at higher integrity levels.. |