Purpose

Enable a system administrator to impose access control boundaries on specific applications. Using per-application profiles.

It allows the implementation of fine-grained access control policies to system resources on a per-application basis.