Mechanisms exist to isolate, or logically separate, any application, service and/or process running with system privileges.