One approach is to run as root, open the privileged port as soon as possible, and then permanently drop root privileges (including any privileged groups the process belongs to).

一个方法是以 root 身份运行，尽可能快地打开需要特权的端 口，然后永久去除 root 特权（包括进程所属的任何有特权的组）。

youdao

When no user ID is presented to the channel, authorization checks are made against the user ID associated with the process running the channel — and that ID is always privileged.

没有为通道提供用户ID时，身份验证检查将针对与运行通道的进程关联的用户ID进行——该ID总是具有所需的相应权限。

youdao

It is likely that SECURE_NOROOT will become a per-process setting so that process trees can choose whether to use true capabilities or use a root-user-is-privileged model.

SECURE_NOROOT以后可能会成为每个进程的设置，让进程树可以选择是使用本身的能力，还是使用root - user - is - privileged模型。

youdao

But the GAO said 65% of trusts reviewed treated claims information as confidential under rules that consider information submitted as part of a legal settlement process as privileged.

FORBES: GAO Report Details Secrecy Of Asbestos Trusts

For those of us who have been privileged to contribute to that service, and to have benefited in the process from Ms. Forbes' nurturing, mentoring, and occasional tough love, we can only pray that just one voice will be stilled by her death, not that of many others.

CENTERFORSECURITYPOLICY: In Honor of Mary Lou Forbes