Which historical least privilege facility does RBAC replace?

Which historical least privilege facility does RBAC replace?

A.
sudo

B.
crack

C.
cron.deny

D.
hosts_deny