How to create a DAC permission access policy

This document provides information on how to create an access policy for DAC permission.

1. In the Segura® Platform, in the navigation bar, hover over the Products menu and select EPM.
2. In the side menu, select Policies > Linux > Policies.
3. In the Policies report, click Add and select General.
4. In the General tab, enter the following information:
   1. In the Policy name * field, enter a name to identify the policy.
   2. In the Status * field, select to enable or disable the policy.
   3. In the Guideline * field, select the guideline to perform the policy.
   4. In the Checker (path or executor) field, enter the command: path="/bin/(app directory)" path.perm=(execution mask number) path.perm=(user group/user).
   5. In the Enable audit? * field, select to enable the auditing of policy actions.
   6. In the Include general denial rule? field, select to allow only registered rules and deny what is not in the rule.
   7. In the Rules field, click + Add to enter the rules.
      1. Select Allow or Lock to allow or block access for the user or group, and enter the rule text in the format of policies in CaitSith. For example: task.gid=(group name) for groups or task.uid=(user name) for users.
      2. Click Add for each rule created.
   8. Click Continue.
5. In the Review tab, review the access policy and click Save.

The system displays a confirmation message: "Success. Data saved successfully". The created access policy will be in the report list at EPM > Policies > Linux > Policies.