Discretionary versus Mandatory Access Control

Contrast the ownership-based models of Unix permissions with system-enforced mandatory policy engines.