Privilege separation is a fundamental security principle in computer systems that aims to limit the capabilities of individual processes or users to minimize the potential damage caused by security vulnerabilities. By separating privileges, an attacker who gains control over one process or user account is prevented from accessing sensitive resources or executing malicious actions that