Handling Access Control (MAC, DAC, and RBAC)

The last area of privilege management we will discuss deals with four methods for handling access control:

  • MAC Mandatory Access Control
  • DAC Discretionary Access Control
  • RBAC Role-based Access Control
  • RBAC Rule-based Access Control

Mandatory Access Control (MAC)

Mandatory access control is the process of controlling access to information based on the sensitivity of that information and whether or not the user is operating at the appropriate sensitivity level and has the authority to access that information. Under a MAC system, each piece of information and every system resource (files, devices, networks, and so on) is labeled with its sensitivity level (such as Public, Engineering Private, Jones Secret). ...

Get CompTIA Security+ All-in-One Exam Guide (Exam SY0-301), 3rd Edition, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.