Restricting privileges of first privileged process in operating system using second privileged process

摘要

Some embodiments provide a system that restricts privileges for a target process in an operating system. During operation, the system receives a request from the target process to restrict the privileges. Next, the system executes a binary that processes the request using services provided by a kernel of the operating system.