System and method for changing abilities of a process by modifying the privileges assigned to the process

摘要

A system and method wherein a set of privileges assigned to a process (110) may be modified responsive to a request (114). The modification may apply to one or more abilities within the set of privileges and may be applied during execution of the process subsequent to the process creation time. Accordingly a process may be created with a default set of privileges (302) and subsequently the privileges may be modified (e.g. to include a sub-set of the default privileges) thereby mitigating the risk of malicious exploitation of the process through attack.