All releases of Rule Set Based Access Control

  •  15 May 2009 08:41
Avatar

    Release Notes: This release is for Linux kernel 2.6.29.2. A significant speedup and even better SMP scalability are expected from the new RCU based list locking. The most important changes since 1.3.5 are the addition of VUM (Virtual User Management) support, OTP support for UM, support of ANY for NETLINK control, checking of CLOSE requests in RC, the addition of SCD target videomem and kernel attribute pagenr, ext4 secure delete support, and many small bugfixes too. Generic lists were changed to use RCU instead of rw spinlocks.

    •  19 Feb 2008 13:47
    Avatar

      Release Notes: This release works both for Linux kernel version 2.4.36 and version 2.6.23.15. It now supports secure delete on XFS and JFS, and the new kernel parameter rsbac_list_recover allows you to register lists even if reading from disk fails. Minor feature enhancements and bugfixes were made.

      •  29 Nov 2007 16:29
      Avatar

        Release Notes: This version includes all the bugfixes from version 1.3.6, as well as the new virtual user management feature. This feature lets you have many virtual user sets in your system. As an example, you can start your mail server in a different set, and the users you're getting mail to will not be any of the system users. Likewise, your jails can be started in a different set so that the users in that jail will never be the same ones as the real system users.

        •  20 Jul 2007 11:53
        Avatar

          Release Notes: This release relates to kernel 2.4.34.5 and 2.6.22.1. There are important fixes with some compilation errors and an important bug with User Management password hashing, introduced with the newer 2.6 kernel crypto API. Some security has been added with safety measures against null pointers.

          •  06 Jun 2007 12:39
          Avatar

            Release Notes: The changes for this release were fixes in the administration tools package for attribute backup and library paths, plus some minor bugfixes. No changes were made in rsbac-common.

            •  14 May 2007 11:27
            Avatar

              Release Notes: Many bugfixes and also many small improvements were made. The FD xstat output looks nicer and uses 64-bit counters to avoid wrapping. Debugging output has been improved in the UM module. libtool and installation of language files in admin tools have been fixed. The sysrq key "w" is now gone, so it is no longer possible to trigger the wake-up through the sysrq key.

              •  11 Jan 2007 19:16
              Avatar

                Release Notes: This release is for kernels 2.4.34 and 2.6.19-2. There are minor bugfixes like the addition of a missing DAZ request in vector, the addition of a role number in the RC syscall denied log message, fixes for LVM/MD issues with rsbac automounting, and a fix for the way rsbac_jail entered the new namespace. There are also small performance tunings: no more rsbac_list_compare_u32, reduced stack usage in list, ACL, and RC init, and optimized list hash functions.

                •  12 Oct 2006 14:19
                Avatar

                  Release Notes: This version offers many improvements over the 1.2.x series and supports kernels 2.4.33.3 and 2.6.18. It includes speed and scalability enhancements, more control over suid files, sockets, authentication, options to the jail module, dazuko udev support, and much more.

                  •  29 Aug 2006 17:27
                  Avatar

                    Release Notes: This release is for both kernels 2.4.33 and 2.6.17. The i386 syscalls have been changed to the standard syscall3. The rsbac_printk / rsbac_syslog code has been updated from 1.3-pre as fix for logging related lockups on SMP systems. RC and ACL default rights have been changed to UM GROUPs to include READ instead of GET_STATUS_DATA.

                    •  21 Jul 2006 19:09
                    Avatar

                      Release Notes: Based on the 1.2.7 release, this release adds allow_parent_ipc and suid/sgid files and directories to JAIL, an optional check of CHANGE_OWNER on PROCESS/USER, upgraded network templates, changes to aci, acl, and auth device lists to use RCU on 2.6 kernels, Dazuko udev support, a UM password history with a configurable length to avoid password reuse, updated HTML documentation, and hiding of directory entries for which a process has no SEARCH.

                      Screenshot

                      Project Spotlight

                      episoder

                      A tool to tell you about new episodes of your favourite TV shows.

                      Screenshot

                      Project Spotlight

                      BalanceNG

                      A modern software IP load balancer.