GFAC based

The RSBAC system is based on the Generalized Framework for Access Control (GFAC) by Marshall Abrams and Leonard La Padula, which describes a general framework approach to separate access control between enforcement, decision, access control data and authorities, who are allowed to modify that data.

The original design followed the suggestions in [LaPadula95] about how to implement GFAC in a *nix system and implemented some access control models briefly described there, namely MAC, FC and SIM. The MAC model implementation has been changed a lot since then.

Several publications already cover certain aspects of the whole RSBAC system, which you can download from the RSBAC documentation page at [RSBAC].

All code is published under GNU Publishing License and can also be downloaded from there.