DAC: Difference between revisions
imported>Unknown user No edit summary |
imported>Unknown user No edit summary |
||
(No difference)
| |||
Revision as of 02:53, 15 January 2026
DAC
An access control policy that is enforced over all subjects and objects in an information system where the policy specifies that a subject that has been granted access to information can do one or more of the following: (i) pass the information to other subjects or objects; (ii) grant its privileges to other subjects; (iii) change security attributes on subjects, objects, information systems, or system components; (iv) choose the security attributes to be associated with newly-created or revised objects; or (v) change the rules governing access control. Mandatory access controls restrict this capability.
Source: NIST SP 800-53 Rev. 4 | Category: