Privilege Separation

A classical design principle in operating systems and security engineering requiring that different components of a system be granted only the minimum permissions necessary to fulfill their responsibilities. High-privilege supervisory layers are strictly isolated from low-privilege execution layers, with a canonical implementation being the separation of kernel mode and user mode in Linux.