Tag Info

New answers tagged

0

Larger enterprises go through centralized initiatives led by the infrastructure team - the very same team that typically manages authentication. To make sure the access rights management works and scales correctly, many turn to standard architectures such as the one pue forward in XACML and older specifications. This architecture defines the notion of: ...


0

RBAC utilizes a set of policies and rulesets to limit the actions of multiple users, including root, so essentially, it makes local root exploits to gain root useless. Grsecurity's RBAC is my favorite, it limits the output of dmesg() and netstat() so the attacker cannot find any useful information for attacking the system.


1

DAC is the way to go to let people manage the content they own. It might sound obvious, but for instance DAC is very good to let users of an online social network choose who accesses their data. It allows people to revoke or forward privileges easily and immediately. Reactive access control, Seeing further and Laissez-faire file sharing provide nice examples ...


0

After doing a little research on your question, I have read that both MAC and DAC can be implemented with RBAC. Obviously there is a clear connection between RBAC and DAC when it comes to simply maintaining ACLs. RBAC seems to be just a higher level, less granular style of organization. RBAC is more appropriate for handling things like separation of duties ...


0

You should check out the authoritative source for RBAC, namely NIST. They have an entire website dedicated to RBAC. NIST website on RBAC.


0

Answered per the comments by @woliveirajr above. Theoretically there is no difference between "minimal" RBAC as implemented in filesystem permissions, and ACLs applying permissions only to groups. So I'm going to guess that the Windows implementation is a layer of abstraction on Windows ACLs, rather than a separate permissions system using its own driver or ...


0

Here is my solution $id=1234; $en_id = encrypString( $id); and I create the url like https://www.example.com/show_order.php?id=$en_id the url will look like https://www.example.com/show_order.php?id=9muEYh4lShFDeCnXqoNpxucs42Fuz5Nexq1IUGWYEffffe88yRbJu and on the other side I decrypt $en_id= decryptString($_GET['id']); the functions for crypt and ...


0

You can give Allow from a domain if you want to give access to local network. Then you can control machines in the domain. <Directory /> Order deny,allow Deny from all Allow from local.example.com </Directory> Anyway allow all and deny from 192.168.1.39 is a bad idea since black listing is not very secure. ...


1

You should specifically allow the IP address(es) that is allowed to access the resource and Deny everything else. order deny,allow deny from all allow from [your ip address] OR Allow from 10.0.0.0/24 Depending on your network configuration, requests to the server from the internet may include public IP addresses. Routers typically only provide NAT from ...


0

Any program that supports peer-to-peer communication needs to support some form of NAT traversal in order for two computers, both behind NAT gateways, to communicate with each other. Static port forwarding works, but is too confusing for most people to set up, while hole-punching isn't reliable and may require a trusted third-party server. This pretty much ...


1

It will all depend on the classification of the data and the classification of the users. You can create different levels of logs for different classifications of users, if that's needed. It's a balance of usability (what logs do they need in order to do their jobs) and security (what logs do they need to NOT see because it is above their classification). ...


1

I see that it can be very useful for the administrator in case if the instalation could not be completed correctly (Just an exampl) so the logs will help to diagnose the problem, so you can have several types of log file depending on the design of your application and an allocation options clearances as every needs .


8

A firewall its self is not an ACL. Typical firewalls are simply a hardware appliance with various interfaces on it. Firewalls use ACLs to filter traffic. By configuring different rules in the ACL you change the behavior of the firewall. Software firewalls do also exist (windows firewall) but the behavior is much the same. It still has its own ACL that ...



Top 50 recent answers are included