Discretionary Access Control



next up previous contents
Next: POSIX.1 Permission Bit Up: POSIX Security Interfaces Previous: Audit Trail Mechanism

Discretionary Access Control

Discretionary Access Control (DAC) is used to control access by restricting a subject's access to an object. It is generally used to limit a user's access to a file. In this type of access control it is the owner of the file who controls other users' accesses to the file.

Using a DAC mechanism allows users control over access rights to their files. When these rights are managed correctly, only those users specified by the owner may have some combination of read, write, execute, etc. permissions to the file.




John Barkley
Fri Oct 7 16:17:21 EDT 1994