In the context of operating system security, which mechanism dictates how privileges are escalated or restricted for processes?

MAC (Mandatory Access Control) is a security mechanism that dictates how privileges are escalated or restricted for processes. It enforces a predefined set of access rules and is commonly used in high-security environments such as military and government systems.