3 ms·
I have worked on and used selinux, rsbac, smack and others, there is no area to improve on rbac itself isn't usable or even secure compared to a capability base
by nwmcsween 15y ago
I have worked on and used selinux, rsbac, smack and others, there is no area to improve on rbac itself isn't usable or even secure compared to a capability based system like capsicum.
- binarycrusader 15y agoRBAC is a capability-based system, so I think you're confused. Unless of course you're basing your claims on a definition of "capabilities" that limits that application specifically to capsicum. I would encourage you to read more about RBAC as it is not as limited as you seem to be implying.