特権分離

Also known as privsep

In computer programming and computer security, privilege separation is one software-based technique for implementing the principle of least privilege. This is used to mitigate the potential damage of a computer security vulnerability.