Within each set, you have three accessbits: read, write, and execute.
每个权限集中都有三个访问位:读、写和执行。
2
Most of the rest of the policy merely is there to grant the container sufficient privilege to accessbits of the system: network ports, devices, consoles, etc.
剩余的策略主要是授与容器充分的特权,以访问系统的各个部分:网络端口、设备和控制台等。
3
When the character following the file mode bits is a space, there is no alternate access method.