A capability is a set of access rights granted to a subject, often transferable. Capabilities are a method for access control.

learn more… | top users | synonyms

3
votes
2answers
77 views

Do `sudo` and `su` belong to capability-based security?

In Linux, do sudo and su belong to Capability-based security ? For example, when editing a system file, we usually need sudo or su to temporarily switch to user root. Does this example belong to ...
4
votes
1answer
26 views

Capability-based security vs protection rings: in what sense are they diametrically opposite?

From http://en.wikipedia.org/wiki/Capability-based_security Capability-based security is to be contrasted with an approach that uses hierarchical protection domains. From ...
5
votes
2answers
609 views

Combining capability-based access control with SAML

I have been looking into various research on identity, PKI and access control trying to boil it down to a simplified methodology for IAM (Identity & Access Management). One thing which pops up in ...
3
votes
1answer
782 views

What are the practical differences between SELinux targeted mode and a capability based OS?

I recently asked a question about the differences between capabilities and mandatory access controls. Among the answers I got the point was made that systems like SE Linux in targeted mode are not a ...
6
votes
5answers
843 views

What is the practical difference between MAC and Capabilities

Both Mandatory Access Controls and Capabilities allow for fine grained privileges to be assigned to applications irrespective or in place of privileges inherited by the running user. Is there any ...