DAC

Discretionary Access Control

  • Users can change security attributes at request

  • Subject with a certain access permission is capable of passing the permission to any other subject

  • Unix DAC - ability of the owner of a file or directory to grant or deny access to other users (chown, chmod, chattr, ..)