Joerg Moellenkamp has written an extensive tutorial on Role-based access control (RBAC) and privileges. To ease readers into the learning piece, the author divided his "course" entitled "Less Known Solaris Features" into four parts: Introduction, RBAC, Privileges, and Epilogue.
The first, Part 1: Introduction, begins with comments on root before turning to remarks on superuser, least privileges, RBAC, privileges, and RBAC and privileges in Solaris.
The second, Part 2: RBAC, begins with a glossary, then turns to such issues as the practical side of RBAC, using the new role, authorizations, using authorizations for services, and predefined roles.
The third part, Part 3: Privileges,
considers privileges, conventional UNIX, practical insights to the system, giving a user additional privileges, RBAC and privileges combined, privilege-aware programming, non-privilege-aware processes, and getting rid of the root apache.
Finally, in part four, the Epilogue, Moellenkamp writes a brief reprise and provides several useful links.
[...read more...]