Talk:Grsecurity/The RBAC System

About the Policy Structure
As stated on the page, the policy structure/syntax is described using a custom variant of EBNF. At first I wrote it in ISO EBNF (PDF warning), because I wanted to use an actual standard, but I came to the conclusion that it's very hard to comprehend, especially if you've never seen EBNF descriptions before. This is why I got rid of the curly braces, concatenation with commas and introduced quantifiers. In my opinion this variant is easier to comprehend than ISO EBNF.

Meev0 (talk) 11:41, 15 August 2009 (UTC)

Per-role socket policies
This page does not make it entirely clear whether it is possible or not to set socket policies per role instead of per subject. --2001:14BB:150:236A:74C4:D6AF:8932:352F (discuss) 23:12, 11 October 2016 (UTC)