VMware, Inc.
DYNAMIC PRIVILEGE MANAGEMENT IN A COMPUTER SYSTEM

Abstract:

An example method of dynamic privilege management in a computer system includes: receiving a task name at a service configured to launch a process corresponding to the task name. The method also includes determining the process is associated with an elevated security context based on a policy that associates the task name with the elevated security context. The method also includes launching, by the service, the process using the elevated security context such that the process runs with elevated privileges.