Hi there, does CaitSith support something like an operation_group? That would simplify rule creation. so something like operation_group general_file_operations read operation_group general_file_operations write operation_group general_file_operations append .. 1 acl @general_file_operations task.exe="/usr/bin/example" .. instead of 1 acl read task.exe="/usr/bin/example" .. 1 acl write task.exe="/usr/bin/example" .. 1 acl create task.exe="/usr/bin/example" .. 1 acl append task.exe="/usr/bin/example" .. Thanks Torsten