D1 · General

What is Discretionary Access Control (DAC)?

DAC lets resource owners control who can access their resources. Users can grant others access to files they own. Most flexible but least secure model — used in Windows/Linux filesystems.
DAC: owner decides. MAC: OS decides. RBAC: role decides. ABAC: attributes decide. DAC is vulnerable to Trojan horses — malware running as you inherits all your permissions.
← Back to Glossary Practice Questions →