ConceptPrinciple of Least Privilege / PoLP / 最小权限原则
Principle of Least Privilege
A core principle of operating system security design, holding that any subject, whether a user, a program or an agent, should be granted only the minimum set of privileges required to complete its task, thereby limiting the potential scope of accidental or malicious actions.