The Flask Security Architecture
-
Cleanly separates policy from enforcement.
-
Well-defined policy interfaces.
-
Support for policy changes.
-
Allows users to express policies naturally.
-
Fine-grained controls over kernel services.
-
Caching to minimize performance overhead.
-
Transparent to applications and users.