---
# System prepended metadata

title: '1: Access Control'
tags: [47-SSA]

---

---
tags: 47-SSA
---

# 1: Access Control
###### Rizwan
<img src='https://i.imgur.com/KKCzFuD.jpg' width='80%'>

---

## 1. Access Control Models
### 1-1 Discrentionary Access Control (DAC) 自主訪問控制
The controls are discretionary in the sense that a subject with a certain access permission is capable of passing that permission (perhaps indirectly) on to any other subject (unless restrained by mandatory access control).
### 1-2 Mandatory Access Control (MAC) 強制訪問控制
With mandatory access control, this security policy is centrally controlled by a security policy administrator; users do not have the ability to override the policy and, for example, grant access to files that would otherwise be restricted.
### 1-3 Role-Based Access Control (RBAC) 角色基礎訪問控制
 It is an approach to implement mandatory access control (MAC) or discretionary access control (DAC). Role-based access control is a policy-neutral access-control mechanism defined around roles and privileges.
### 1-4 Usage Control (UCON) 
### 1-5 Policy-Based Access Control (PBAC) 
 
        
---
# Lab 1 - UNIX-based Access Control


| [rwx]      | [rwx] |        [rwx]        |
| ---------- | ----- |:-------------------:|
| owner/user | group | others/anyone other |

