Announce: RSBAC v1.2.3 released



Rule Set Based Access Control (RSBAC) v1.2.3 has been released! Full
information and downloads are available from

We are also proud to announce the relaunch of our Website and a set of
worldwide mirrors.

RSBAC Key Features:

* Free Open Source (GPL) Linux kernel security extension
* Independent of governments and big companies
* Several well-known and new security models, e.g. MAC, ACL and RC
* Control over individual user and program network accesses
* Any combination of models possible
* Easily extendable: write your own model for runtime registration
* Now includes on-access virus scanning with Dazuko interface
* Support for current kernels in 2.4 and 2.6 series
* Stable for production use since January 2000

Between the first upload and this announcement, the first important
security bugfixes had to be released, too, which also apply to previous
versions. You can always find the latest bugfixes at, they are already included in some
of the pre-patched kernel sources (-bfX) at

New features in RSBAC v1.2.3:

* Port to 2.6 kernel series with many internal changes
* Full log separation between system and RSBAC log
* Improved hiding of unaccessible processes

* Learning mode, global and per-process

* System boot role, now separate from root's role
* Extra process type for kernel threads for explicit access control
* Types for user objects

* New 100% compatible Dazuko ( module
* On-access scanning through user space antivirus daemons
* In-kernel scanning result cache, speeding it all up significantly

* Global learning mode

* New PaX support module

* Several security related and other bugfixes (it is strongly
recommended to update)
* Linux capability restrictions for jailed processes

* Trusted-for-user list instead of single value

Please forward this announcement to where you think it is applicable, e.g.
local or national security lists, newspapers or magazines, or your
favourite Internet forum.

Feedback is always welcome!

-- - GnuPG: 2048g/5DEAAA30 2002-10-22


Вы не можете добавлять комментарии в эту тему. Тема перемещена в архив.