Decision Module in Userspace

Dear all,

Can a decision module be implemented in userspace? Certain high level
software components should not depend on legacy kernel as this impacts the
overall performance of the system. RSBAC being a framework could be extended
but not sure whether there is any work already done to do this. For instance
if I want a web framework (e.g. Django) to use RSBAC's security then it
would not be a good idea to use the in kernel decision modules.

We can also say that such enforcement requirements should be dealt
irrespective of rsbac and secured by the kernel based modules. Such general
frameworks for access control are usually not available to the userspace
unless using an application framework with such implementations. Some
clarity of thought required here.

Thanks.

-- 
Shahbaz Khan
R&D Engineer,
Tactical Engineering and Consultancy.

http://shazkhan.wordpress.com/
http://pk.linkedin.com/pub/shahbaz-khan/20/116/b49
http://imsciences.edu.pk/serg/
http://csrdu.org/
+92-91-332-9915828