Page Information

Title:	POS02-C. Follow the principle of least privilege
Author:	Dhruv Mohindra	May 24, 2008
Last Changed by:	David Svoboda	May 20, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/QtYxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (2)     Page: ENV03-C. Sanitize the environment when invoking external programs     Page: POS05-C. Limit access to files by creating a jail

Parent Page     Page: Rec. 50. POSIX (POS)

• privileges
• android-applicable
• unenforceable
• recommendation
• pos
• cwe-250

Time	Editor
May 20, 2025 09:32	Jill Britton	View Changes
REM Cost Reform
Mar 05, 2025 08:39	Jill Britton	View Changes
Apr 27, 2022 08:58	Jill Britton	View Changes
Nov 16, 2017 14:41	Will Snavely	View Changes
Feb 23, 2017 13:50	Lisa Robertson

External Links (11)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/data/definitions/250.html
    web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2031
    xorl.wordpress.com/2009/06/14/opensolaris-cifssmb-invalid-f…
    https://buildsecurityin.us-cert.gov/daisy/bsi/articles/know…
    cwe.mitre.org/data/definitions/272.html
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/mini…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/

SEI CERT C Coding Standard (6)     Page: Klocwork_V     Page: BB. Definitions     Page: POS37-C. Ensure that privilege relinquishment is successful     Home page: SEI CERT C Coding Standard     Page: Klocwork     Page: AA. Bibliography