Mozilla 2/Protected mode: Difference between revisions

Line 14: Line 14:
In general, Integrity applies the general rule of "no write-up", implying objects with lower integrity do not have write access to objects with higher integrity. In addition, objects running at much lower integrity levels often have "no read-up" rules applied for higher integrity objects which restrict access completely.
In general, Integrity applies the general rule of "no write-up", implying objects with lower integrity do not have write access to objects with higher integrity. In addition, objects running at much lower integrity levels often have "no read-up" rules applied for higher integrity objects which restrict access completely.


Firefox 2.0 currently runs at the default "medium" integrity level. The goal is to add support for running at both low and medium integrity without adversely effecting the browser's usability or user experience. The decision of which integrity level Fx runs at would be left to the user through a user pref or command line option.
Firefox 2.0 currently runs at the default "medium" integrity level. The goal is to add support for running at both medium and low integrity levels without adversely effecting the browser's usability or user experience. The decision of which integrity level Fx runs would be left to the user through a user pref or command line option.


Three broad goals summarize the work required:
Three broad goals summarize the work required:


* Research the areas of the Mozilla codebase which will be affected by applications running at a "low" integrity.
* Research the areas of the Mozilla codebase which would be affected by applications running at a "low" integrity.
* Add support for a medium integrity launch shim ("broker") for Firefox. (bug 396196)
* Add support for a medium integrity launch shim ("broker") for Firefox. (bug 396196)
* Augment the functionality of the broker to support a low integrity instance of Firefox which can interact with the os and applications running at higher integrity levels..
* Augment the functionality of the broker to support a low integrity instance of Firefox which can interact with the os and applications running at higher integrity levels..
Confirmed users
1,982

edits