Access Control 33
Access Control 33 : Computer Security: (1) Authorization: Authorization is act of defining access rights for subjects. An authorization policy specifies the operations that subjects are allowed to execute on the system. Most modern operating systems implement authorization policies as formal sets of permissions that are variations or extensions of three basic types of access: (a) Read (R): The subject can; (b) Read file contents; (c) List directory contents; (d) Write (W): The subject can change the contents of a file or directory with the following tasks: (a) Add; (b) Create; (c) Delete; (d) Rename; (e) Execute (X): If the file is a program, the subject can cause the program to be run. (In Unix systems, the 'execute' permission doubles as a 'traverse directory' permission when granted for a directory). These rights and permissions are implemented differently in systems based on discretionary access control (DAC) and mandatory access control (MAC)
No records Found