Company
Date Published
Author
The Couchbase Team
Word count
125
Language
English
Hacker News points
None

Summary

memcached on OpenSolaris is a privilege-aware application that takes away its privileges, specifically file link and fork/exec/info/session privs, to prevent potential security exploits such as stack smashes. This feature leverages the Solaris least privilege model, which allows processes to relinquish their own privileges. The memcached application's design ensures it cannot be used as a vector for these types of attacks.