Patent ID: 9558343
Date: 2017-01-31
CPC Classifications: G06F

Claim:
1. A method comprising: detecting execution of a command to execute a child process; determining, before execution of the child process, if one or more rules apply to the child process based on one or more criteria, the one or more criteria facilitating blocking or allowing inheritance by the child process of a parent process token of a parent process; modifying, in accordance with the one or more applicable rules, a child process token of the child process to change a security parameter with which to execute the child process, the security parameter comprising a permission, a privilege, and an integrity level with which to execute the child process; wherein the modification of the child process token for the security parameter is performed by a user via a privilege manager; wherein the user sets the integrity level; verifying an identity of the user setting the integrity level; requesting a justification from the user setting the integrity level; accessing the modified child process token of the child process to determine the security parameter; and executing the child process, the child process being executed using the modified child process token; and allowing access to an object based, at least in part, on the execution of the child process.