arXiv:2605. 28991v1 Announce Type: new Abstract: Large-scale enterprise software systems commonly run as unprivileged service accounts to enforce least privilege, yet still depend on a small set of privileged components -- such as executables with elevated ownership, permissions, or capabilities -- for narrowly scoped operations.
Paper
A Secure, Manifest-Based Framework for Delegated Privilege Promotion
Unreadunread