DAC rules are access control settings or policies that determine who can access a resource and what actions they can perform on it. These rules are defined by the owner of the resource, granting or restricting access based on user identities and their associated permissions.