---
source: src/render/machine.rs
expression: "render_plain(&sample(), &plain_term())"
---
verdict blocked read /srv/secret/report.txt
culprit DAC denies read for alice: mode 0600
chain / pass x
chain srv pass x
chain secret pass x
chain report.txt block r class other lacks r
evidence dac ls_ld -rw------- 1 root root 1240 /srv/secret/report.txt
crosscheck agree model and kernel concur
fix low run sudo setfacl -m u:alice:r /srv/secret/report.txt
fix-note owner, group, other unchanged