--- title: "How to create a DAC permission access policy" slug: "epm-linux-use-case-create-dac-permission-policy" updated: 2026-11-03T14:48:14Z published: 2026-11-03T14:48:14Z canonical: "docs.senhasegura.io/epm-linux-use-case-create-dac-permission-policy" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt > Use this file to discover all available pages before exploring further. # How to create a DAC permission access policy This document provides information on how to create an access policy for DAC permission. 1. In the **Segura™ Platform**, in the navigation bar, hover over the **Products menu** and select **EPM**. 2. In the side menu, select **Policies > Linux > Policies**. 3. In the **Policies** report, click **Add** and select **General**. 4. In the **General** tab, enter the following information: 1. In the **Policy name *** field, enter a name to identify the policy. 2. In the **Status *** field, select to enable or disable the policy. 3. In the **Guideline *** field, select the guideline to perform the policy. 4. In the **Checker (path or executor)** field, enter the command: `path="/bin/(app directory)" path.perm=(execution mask number) path.perm=(user group/user)`. 5. In the **Enable audit? *** field, select to enable the auditing of policy actions. 6. In the **Include general denial rule?** field, select to allow only registered rules and deny what is not in the rule. 7. In the **Rules** field, click **+ Add** to enter the rules. 1. Select **Allow** or **Lock** to allow or block access for the user or group, and enter the rule text in the format of policies in CaitSith. For example: `task.gid=(group name)` for groups or `task.uid=(user name)` for users. 2. Click **Add** for each rule created. 8. Click **Continue**. 5. In the **Review** tab, review the access policy and click **Save**. The system displays a confirmation message: **"Success. Data saved successfully"**. The created access policy will be in the report list at **EPM > Policies > Linux > Policies**.