1. A method of specifying and enforcing at least one run-time policy for at least one computer process executing on a computer system, wherein the computer system comprises a computer operating system, the method comprising: relating the policy with an executable file of the process; associating the policy with a running instance of the process; and enforcing the policy on the running instance.