As part of the UNIX-like package, Ironclad supports the traditional UID/EUID values per-process for basic access protection, both for files and syscalls.
Unlike most UNIX systems, the setuid
bit is fully ignored and not
implemented, instead, as part of the mandatory access control facilities
explained later, MAC_CAP_SETUID
is provided, with similar functionality.
Groups are not supported in any shape or form.