rsbacl5s.gif (2243 Byte)  

Rule Set Based Access Control (RSBAC) for Linux - Download


RSBAC Source Code

All RSBAC code is copyrighted (c) 1999-2002 by Amon Ott (except where explicitely stated otherwise in the code) and published under the GNU General Publishing Licence v2. Please see the RSBAC copyright notice for details.

The RSBAC source code depends on original Linux kernel source trees in the versions contained in the filename or package, because of deeper modifications. Only recent kernels will be further supported. If you need support for other kernel versions, please give me a note.

There is also an English instruction on installation and administration. The German version (for 1.0.2a) is no longer maintained and very old by now.

Newer code is available via the RSBAC Homepage.

Released Versions and Administration Tools

You will need a kernel file package, a kernel patch and a set of administration tools. The administration tools use part of the kernel code contained in the kernel packages and can therefore only be used for the version given. Please read the instruction and look out for bugfixes.

Kernel Patches

Patch sets for all kernel releases supported by RSBAC are available here. Newer kernel versions might be supported in an RSBAC pre version.

Prepatched Kernel Source Packages

You should always find already patched, but unconfigured kernel source tree tar.bz archives here for the current RSBAC stable release and the latest kernels. Please note that you still have to call 'touch Makefile' after config of these kernels.

Bugfixes for released Versions

Here you can get bugfix patches for relevant bugs in released RSBAC versions from 1.1.0 onwards.

Pre-Versions

Pre-versions show the current, mostly stable code. Some features might still be unfinished or unstable, though.

Development State

Whenever the current development tree compiles and seems to work, it is copied to the RSBAC RSync server at rsync://rsbac.remoteserver.org. You can directly sync into your local source tree and compile, because all patched files are available. Please note that the different kernel versions can still have different RSBAC code versions - and that the rsync server might be unavailable from time to time.

Ports to other archs

Fortunately, Shaun Savage has volunteered to help on the port to alpha maschines. All I have and thus can test is i386. You find the port in all versions from 1.0.7a-pre1. Maybe somebody is interested in helping me at porting to other archs - it's not difficult, only patching three files in arch/*/kernel and the syscall table in include/asm-*/unistd.h.

From version 1.2.0, there is untested support for PowerPC. If you get it to run, please tell me.

Chris Kuethe now maintains RSBAC for User Mode Linux (UML). As UML is not in the standard kernel, there are extra patches available.


Questions, tips, etc.

28-May-02, -ao