$3\mathrm{.}2$ Task $2$: Adjusting Privileges

With capabilities, it is possible to dynamically adjust the amount of privileges a process has, which is consistent with the principle of least privilege. For example, when a privilege is no longer needed in a process,

we should allow the process to permanently remove the capabilities relevant to this privilege. Therefore,

even if the process is compromised, attackers will not be able to gain these deleted capabilities. Adjusting

privileges can be achieved using the following capability management operations.