Summary

Access Control Lists (ACLs) provide a method to extend the permissions associated with files and directories. Standard Unix permissions support only three types of users: the owner, a group, and everyone else. Using ACLs, unique permissions can be assigned to additional user and groups.

The Role-Based Access Control (RBAC) capability gets away from the all-or-nothing approach to system administration that is associated with the superuser account and allows specific sets of authorizations and rights to be grouped into roles. These roles can be used to spread system administration responsibilities across multiple accounts without compromising system security.

Get Solaris™ 9 System Administrator Exam Cram™ 2 (Exams 310-014 and 310-015) now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.