4 ms·
RBAC is garbage... developers and such need to write complicated rulesets for n solutions of RBAC systems. A less painful solution would be what FreeBSD current
by nwmcsween 15y ago
RBAC is garbage... developers and such need to write complicated rulesets for n solutions of RBAC systems. A less painful solution would be what FreeBSD currently has - capsicum.
- binarycrusader 15y agoIf you have specific feedback about areas that need improvement, I'm certain the blog author would love to hear them. Ranting without justification isn't likely to solve anything.
- nwmcsween 15y agoI have worked on and used selinux, rsbac, smack and others, there is no area to improve on rbac itself isn't usable or even secure compared to a capability based system like capsicum.
- binarycrusader 15y agoRBAC is a capability-based system, so I think you're confused. Unless of course you're basing your claims on a definition of "capabilities" that limits that application specifically to capsicum. I would encourage you to read more about RBAC as it is not as limited as you seem to be implying.