Security. Only allow application to write under its root directory?

[NewsBot]

I am just thinking that if an application is restricted to only have write access to its own application directory, then, it won't be able to change other places doing malicious attacks.

 

Wouldn't it be cool to have a user type that's only able to install software in this mode? The installation will always ask root directory by MS and the installer and application can only maneuver in that directory. A virus wish to attack will never get out of there. Any write operation outside its root directory will be ignored without warning.

 

The basic ideas it provide an user type that can install application without worrying about virus attack. It will restrict a lot of applications to run properly, but I am willing to trade that off.

 

More...

 

View All Our Microsft Related Feeds