RSBAC (http://www.rsbac.de/) RSBAC is a control framework Generalized Framework for Access Control (GFAC) You can combine model from MAC, RC (Role), ACL... You can write your own model Shell tools (rsbac_*) and dialog tools Similarity with SELinux and opposition (f.example : extended API calls) Future versus LSM ? Integration ?