Tuesday, 16/June/2009

RSBAC 1.4.2 kernel patches have been updated to support the latest kernel, 2.6.30.

mod_rsbac SVN has also been updated, fixing a long standing race condition (albeit not a security issue), that could be triggered when an Apache worker would serve many files in a short amount of time.

mod_rsbac is used in production on rsbac.org and several other web servers.

Finally, we’re happy to announce that we now have a dedicated forum which you’re welcome to use for discussion and questions. Remember that we also have a mailing-list and and irc channel (See: the contact page).

Thanks to Paul D. Robertson for setting up and managing the RSBAC forum.

Friday, 15/May/2009

RSBAC 1.4.2 has been released for kernel 2.6.29.2. We expect a significant speedup and even better SMP scalability from the new RCU based list locking.

There will be no more releases for 2.4 kernels, because new features like RCU require 2.6. Still, 1.4.1 for 2.4.37 is very stable and has no known bugs. Please keep using 1.4.1 for 2.4 like we do. The svn trunk for 2.4 will stay maintained for a while.

Most Important changes since 1.4.0 (somehow we skipped the 1.4.1 announcement):

• Change generic lists to use RCU instead of rw spinlocks
• New SCD target videomem on x86 arch to distinguish between video and other kernel memory (SCD kmem) access
• New config option RSBAC_ENFORCE_CLOSE to really deny close, if decided
• Check protocol in NETLINK network templates when matching
• Upgrade to 2.6.29.x, tons of kernel internal API changes again as usual
• Many small bugfixes

Upgrading from 1.3 or 1.4.x is easy: Compile, install and boot. Some extra checks might require minor adjustments, though.

Thursday, 15/January/2009

RSBAC 1.4.0 has been released for kernels 2.4.37 and 2.6.27.10. (Full announcement)

Most Important changes since 1.3 series:

• Virtual User Management support (http://rsbac.org/redir.php?t=vum)
• One time password support (http://rsbac.org/redir.php?t=otp)
• Code for kernels 2.4 and 2.6 has been separated

Upgrading from 1.3 is easy: Compile, install and boot. Some extra checks might require minor adjustments, though.

Monday, 10/November/2008

RSBAC 1.4.0-rc3 has been released for kernels 2.4.36 and 2.6.27. (Full announcement)

• New interception review
• Splitted 2.4 and 2.6 common code
• Automount support converted for vfsmount usage
• Long username support in VUM
• Many bugs fixed

Please note that we plan to release this last candidate as 1.4.0, so please test it as much as possible, thanks!

You can get it at the usual location.

Tuesday, 19/February/2008

RSBAC 1.3.7 has been released for kernels 2.4.36 and 2.6.23. (Full announcement)

• Supports secure delete on XFS and JFS
• New kernel parameter rsbac_list_recover to register lists even if reading from disk fails
• Correct pam install location automatically on x86_64
• Many bugs fixed

See the kernel change log and tools change log for more information.

Friday, 30/November/2007

The first preview release of RSBAC 1.4.0 has been released.

It includes 1.3.6+ bugfixes of course, as well as the new Virtual User Management feature. This feature supports many virtual user sets in your system. Read more details here. Downloads at download#pre.

Wednesday, 28/November/2007

After first harddisk failures, rsbac.org has been moved with all services to new and better hardware and a new IP. Please tell us, if you find any problem.

Wednesday, 14/November/2007

A new Live CD with RSBAC 1.3.6 is now available at http://livecd.rsbac.org/1.3.6. It also contains a partial copy of www.rsbac.org and download.rsbac.org, which are served out with a jailed Apache after boot. This means that this Live CD is bigger than usual. More details in http://livecd.rsbac.org/1.3.6/rsbaclive-20071106.img.txt.