rsbacl5s.gif (2243 Byte)  

Rule Set Based Access Control (RSBAC) for Linux - Download


RSBAC Source Code

All RSBAC code is copyrighted (c) 1999-2001 by Amon Ott (except where explicitely stated otherwise in the code) and published under the GNU General Publishing Licence v2. Please see the RSBAC copyright notice for details.

The RSBAC source code depends on original Linux kernel source trees in the versions contained in the filename or package, because of deeper modifications. Only recent kernels will be further supported. If you need support for other kernel versions, please give me a note.

There is also an English instruction on installation and administration. The German version (for 1.0.2a) is no longer maintained and very old by now.

Newer code is available via the RSBAC Homepage.

Released Versions and Administration Tools

You will need a kernel file package, a kernel patch and a set of administration tools. The administration tools use part of the kernel code contained in the kernel packages and can therefore only be used for the version given. Please read the instruction and look out for bugfixes.

Kernel Patches

Patch sets for all kernel releases supported by RSBAC are available here. Newer kernel versions might be supported in an RSBAC pre version.

Pre-Versions

Pre-versions show the current, mostly stable code. Some features might still be unfinished or unstable, though.

Bugfixes for released Versions

Here you can get bugfix patches for relevant bugs in released RSBAC versions from 1.1.0 onwards.

Ports to other archs

Fortunately, Shaun Savage has volunteered to help on the port to alpha maschines. All I have and thus can test is i386. You find the port in all versions from 1.0.7a-pre1. Maybe somebody is interested in helping me at porting to other archs - it's not difficult, only patching three files in arch/*/kernel and the syscall table in include/asm-*/unistd.h.

Jörgen Sigvardsson has ported RSBAC for User Mode Linux (UML), but no longer actively maintains this port. As UML is not in the standard kernel, there are extra patches available.


Questions, tips, etc.

27-Aug-01, -ao