Capability-Based Security for Processes

Restrict the privileges of a process to specific kernel operations instead of full root access.