Commit 2c2766a3 authored by Kees Cook's avatar Kees Cook Committed by Valerie Aurora
Browse files

Define "Principle of Least Privilege"

parent 1a0213bb

EN-304-626.md

+1 −1
Changes for EN-304-626.md: 1 added line, 1 removed line.
Original line number Diff line number Diff line
@@ -309,7 +309,7 @@ ISO/IEC 15408). 


**Attack Surface:** User interfaces, target protocol interfaces and reachable data paths that can be attacked within the system.



FIXME add "Principle of Least Privilege"

**Principle of Least Privilege:** Users, processes, and interfaces are granted only the minimum level of permission necessary to perform their legitimate functions, and nothing more.



## 3.2 Abbreviations