A Mandatory Access Control (MAC) system which is a kernel (LSM) enhancement to confine programs to a limited set of resources.
apparmor is an effective and easytouse linux application security system. apparmor proactively protects the operating system and applications from external or internal threats, even zeroday attacks, by enforcing good behavior and preventing even unknown application flaws from being exploited. apparmor security policies completely define what system resources individual applications can access, and with what privileges. a number of default policies are included with apparmor, and using a combination of advanced static analysis and learningbased tools, apparmor policies for even very complex applications can be deployed successfully in a matter of hours.
Security focused Access Control
security-focused access-control linux mac mandatory-access-control
Role-based access control system, least privilege memory protection, chroot restriction, etc.
