Capability

Definitions

1. An unforgeable token or reference that grants the holder permission to perform a specific operation on a specific resource — a security model where possessing the capability is both necessary and sufficient for access, eliminating ambient authority.

   In plain English: A permission token that lets you do one specific thing — instead of being an all-powerful admin, you only get exactly the access you need.

   Example: "Linux capabilities let you grant a process CAP_NET_BIND_SERVICE without giving it full root."

Related Terms

• Privilege Escalation
• Authorization
• IAM
• RBAC
• ABAC
• Access Control List
• EAP
• Fail-Closed
• Fail-Safe Default
• Port Knocking
• Data Lake Security
• Database Firewall
• Management Plane Security
• Read Access