Context: Within computer systems, two of many security models capable of enforcing privilege separation are access control lists (ACLs) and capability-based security. Using ACLs to confine programs has been proven to be insecure in many situations, such as if the host computer can be tricked into indirectly allowing restricted file access, an issue known as the confused deputy problem. It has also been shown that the promise of ACLs of giving access to an object to only one person can never be guaranteed in practice. Both of these problems are resolved by capabilities. This does not mean practical flaws exist in all ACL-based systems, but only that the designers of certain utilities must take responsibility to ensure that they do not introduce flaws.[citation needed]

Question: What does ACL stand for?
Answer: access control lists

Question: ACLs and capability based security are two security models capable of what?
Answer: enforcing privilege separation

Question: A host computer tricked into indirectly allowing access to restricted files is known as what?
Answer: the confused deputy problem

Question: The confused deputy problem and the problem of not guaranteeing only one person has access are resolved by what?
Answer: capabilities

Question: What must designers of systems that are ACL based do?
Answer: take responsibility to ensure that they do not introduce flaws

Question: What has using ACLs to confine programs proven?
Answer: Unanswerable

Question: How can a computer with ACL be tricked?
Answer: Unanswerable

Question: Which two models in computer systems enforce privilege separation?
Answer: Unanswerable

Question: Can an ACLs limit access to one person?
Answer: Unanswerable

Question: What is the total number of security models in a computer system?
Answer: Unanswerable

Question: When is an ACL most secure?
Answer: Unanswerable

Question: What prevents ACLs from giving access to only one person?
Answer: Unanswerable

Question: What do ACLs promise?
Answer: Unanswerable

Question: Who is not responsible for the flaws in an ACL system?
Answer: Unanswerable