It could not access anything other than the log file, no matter what... this means a buffer overflow bug, or any other fault could not cause data to leak from the system.In a permissions/ACL based system, the administrator decides the rights of users, and the programs they run, without distinctionWith cabsec capabilities, the user decides which of their rights they wish to delegate to a process or