Under A.1.2, which statement correctly describes how application processes should run?

Under A.1.2, which statement correctly describes how application processes should run?

• A. Application processes must run using the entity's own non-privileged user ID
• B. Application processes must run as root
• C. Each entity may share files with other entities
• D. Logs can be viewed by any entity

Answer: (A)

The main idea here is applying the principle of least privilege to application processes. Each process should run with only the minimum permissions it needs, not as a high-privilege account. Running under a non-privileged user ID limits what the process can access or modify, so if the process is compromised, the attacker gains far less potential damage and the system remains better contained. Running as root would defeat this protection—root has full control over the system, so a compromised process could access sensitive data, alter configurations, and affect other users. Sharing files between entities or allowing any entity to view logs also breaks isolation and confidentiality, increasing the risk of unauthorized access or data leakage. Therefore, the correct approach is that application processes run using the entity’s own non-privileged user ID, aligning with the goal of minimizing privileges and preserving isolation.

The main idea here is applying the principle of least privilege to application processes. Each process should run with only the minimum permissions it needs, not as a high-privilege account. Running under a non-privileged user ID limits what the process can access or modify, so if the process is compromised, the attacker gains far less potential damage and the system remains better contained.

Running as root would defeat this protection—root has full control over the system, so a compromised process could access sensitive data, alter configurations, and affect other users. Sharing files between entities or allowing any entity to view logs also breaks isolation and confidentiality, increasing the risk of unauthorized access or data leakage.

Therefore, the correct approach is that application processes run using the entity’s own non-privileged user ID, aligning with the goal of minimizing privileges and preserving isolation.