3 ms·

Please read on RBAC. If you don't want to learn SELinux you can use AppArmor or grsecurity's RBAC system.