Differential D10257 Diff 27025 head/en_US.ISO8859-1/books/faq/book.xml

Changeset View

Standalone View

Show First 20 Lines • Show All 5,335 Lines • ▼ Show 20 Lines	<answer>

<itemizedlist>		<itemizedlist>
<listitem>		<listitem>
<para>A process which is placed inside a set of virtual		<para>A process which is placed inside a set of virtual
walls that are designed to prevent someone who breaks		walls that are designed to prevent someone who breaks
into the process from being able to break into the		into the process from being able to break into the
wider system.</para>		wider system.</para>

<para>The process is be able to run inside the walls.		<para>The process is only able to run inside the walls.
Since nothing the process does in regards to executing		Since nothing the process does in regards to executing
code is supposed to be able to breech the walls, a		code is supposed to be able to breach the walls, a
detailed audit of its code is not needed in order to		detailed audit of its code is not needed in order to
be able to say certain things about its		be able to say certain things about its
security.</para>		security.</para>

<para>The walls might be a user ID, for example.		<para>The walls might be a user ID, for example.
This is the definition used in the &man.security.7;		This is the definition used in the &man.security.7;
and &man.named.8; man pages.</para>		and &man.named.8; man pages.</para>

▲ Show 20 Lines • Show All 2,171 Lines • Show Last 20 Lines