\\ \\ //All the RSBAC code is copyrighted (c) 1997-2007 by Amon Ott (except where explicitly stated otherwise in the code), and published under the [[wp>GPL|GNU General Publishing License v2]]. Please consult the RSBAC [[copyright notice]] for details.// \\ \\ \\ \\ The RSBAC source code depends on original [[http://www.kernel.org|Linux kernel source trees]]. Only recent kernels are supported. If you need support for other kernel versions, please give us a [[contact|note]]. All source packages have been signed either with Amon Ott's ([[team:ao:gnupg|GnuPG]], [[team:ao:pgp|PGP]]) key or kang's [[team:kang:gnupg|GnuPG]] key. Please follow the [[documentation|documentation]] for installation instructions and user manual. Updates are posted on the [[home|RSBAC homepage]] as well as on the right sidebar box called <> of every page. Please consider using a [[mirrors]] near to you, to download releases in best conditions. To protect against buffer overflows, we recommend using Pageexec ([[http://pax.grsecurity.net|PaX]]) - their patches integrate nicely with RSBAC, as shown in the [[http://hardened.gentoo.org/rsbac|Gentoo]] distribution. ====== RSBAC admin utilities and Common RSBAC base archive ====== Please remember that your RSBAC admin utilities version must match your RSBAC kernel patch version. You will find the base RSBAC archive in this section, as well as corresponding RSBAC admin utilities. You also need the version specific kernel patch available in the section below, <> == Current Version: 1.3.7 == (//Released on Tuesday, February 19, 2008//) * Base RSBAC archive Release Notes: [[@dl.php?file=code/1.3.7/changes-1.3.7.txt|changes-1.3.7.txt]] * Base RSBAC archive: rsbac-common-1.3.7 [ [[@dl.php?file=code/1.3.7/rsbac-common-1.3.7.tar.bz2|.tar.bz2]] | [[@dl.php?file=code/1.3.7/rsbac-common-1.3.7.tar.bz2.md5sum|md5sum]] | [[@dl.php?file=code/1.3.7/rsbac-common-1.3.7.tar.bz2.asc|gpg]] ] * RSBAC Admin Tools Release Notes: [[@dl.php?file=code/1.3.7/admin-changes-1.3.7.txt|admin-changes-1.3.7.txt]] * RSBAC Admin Tools: rsbac-admin-1.3.7 [ [[@dl.php?file=code/1.3.7/rsbac-admin-1.3.7.tar.bz2|.tar.bz2]] | [[@dl.php?file=code/1.3.7/rsbac-admin-1.3.7.tar.bz2.md5sum|md5sum]] | [[@dl.php?file=code/1.3.7/rsbac-admin-1.3.7.tar.bz2.asc|gpg]] ] * Please make sure you are using a recent version of the Dialog tool * Notes: Supports kernel 2.4 and 2.6 \\ \\ //[[@dl.php?file=code|Deprecated previous versions]]// \\ \\ //[[@dl.php?reset|Reset download mirror selection]]// ====== Kernel patches ====== == Current version: 1.3.7 == [[@dl.php?file=patches/1.3.7/|Download patches]] ====== Official Classic kernels ====== //Pre-patched, supported, and ready to compile kernels. Only contains RSBAC and the usual vanilla Linux kernel// == Current version: 1.3.7 == [[@dl.php?file=kernels/1.3.7/|Download kernels]] ====== Enhanced RSBAC kernels ====== //**Unsupported**: Contain all security fixes, possible hardening patches, [[wp>PaX]], RSBAC and are usually up to date// These kernels use the latest stable RSBAC release and the latest stable Linux kernel. Please note that these kernels might not be fully stable, and that they are not gpg signed. * [[http://enhanced.rsbac.org/|Enhanced RSBAC kernels (HTTP)]] * [[ftp://rsbac.org/enhanced|Enhanced RSBAC kernels (FTP)]] * [[:mirrors#enhanced_kernels|Mirrors]] ====== Debian, Ubuntu packages and repository ====== //**Unsupported**: but usually up to date// You can build RSBAC Debian packages from the source tarballs. However, for simplicity, you can use our repository of prebuild packages. They work fine with the current Debian stable and latest Ubuntu release. (It probably works with Ubuntu pre-releases and Debian unstable as well). The kernel package especially tracks the Debian stable kernel, so if you need a more recent kernel, roll your own :) To add our repository, you first need to import our packaging key (): ''Fingerprint: 07CC 72DF F773 B619 EC7A A807 838B D580 4DF9 DF9B'' # gpg --keyserver subkeys.pgp.net --recv-keys 0x4DF9DF9B && gpg --export 0x4DF9DF9B | sudo apt-key add - **Alternative:** # wget -O- http://www.rsbac.org/doc/gnupg/debian.rsbac.org.key | sudo apt-key add - Then add the repository to your list of repositories: # sudo gedit /etc/apt/sources.list add the lines: #Stable packages deb http://debian.rsbac.org/ etch main #Uncomment to get the unstable packages #deb http://debian.rsbac.org/ sid main And you're ready to go! # sudo apt-get update # sudo apt-get install rsbac-admin # apt-cache search linux-image rsbac linux-image-2.6.24.3-rsbac - Linux kernel binary image for version 2.6.24.3-rsbac # sudo apt-get install linux-image-2.6.24.3-rsbac ====== Third Party Binary Packages ====== Please also have a closer look at the [[@links#linux_distributions_with_rsbac|RSBAC ready distributions]]. ===== Fedora Core RPMs ===== RPMs for Fedora Core are available here: * http://fedora.rsbac.org/ * ftp://rsbac.org/fedora/ Please note that these might also work on Redhat based Linux distributions, and that they are supported externally by Andrea Pasquinucci. For further information, please check the README files on this server. ====== Live CDs ====== Test RSBAC with a Debian based live CD, or use it on a USB key you can bring everywhere. It let you to fully test RSBAC functions without having to install it. Just insert the CD or USB key, and try it out ! http://livecd.rsbac.org/ ftp://rsbac.org/livecd/ ([[mirrors#rsbac_live-cd|mirrors]]) ====== Preversions of upcoming RSBAC releases ====== //These versions are not well tested but usually contain the most up to date RSBAC code// == Pre == Pre-versions show the current, mostly stable code. Some features might still be unfinished or unstable, and might break. [[@dl.php?file=pre/|Download pre-versions]] == SVN == RSBAC is developed with [[wp>subversion]]. All RSBAC code is kept in the subversion repositories at %%svn://rsbac.org/%%, the read-only Web interface is available at http://svn.rsbac.org. As we are using SVK over subversion, code can be (and mostly is) signed with GnuPG. The latest admin tools code is always available under trunk, while the latest kernel code lives in the linux-rsbac branch. The tags will show released versions.