\\ \\ //All the RSBAC code is copyrighted (c) 1997-2010 by Amon Ott (except where explicitly stated otherwise in the code), and published under the [[wp>GPL|GNU General Publishing License v2]]. Please consult the RSBAC [[copyright notice]] for details.// \\ \\ \\ \\ The RSBAC source code depends on original [[http://www.kernel.org|Linux kernel source trees]]. Only recent kernels are supported. If you need support for other kernel versions, please give us a [[contact|note]]. All source packages have been signed either with Amon Ott's ([[team:ao:gnupg|GnuPG]], [[team:ao:pgp|PGP]]) key or kang's [[team:kang:gnupg|GnuPG]] key. Please follow the [[documentation|documentation]] for installation instructions and user manual. Updates are posted on the [[home|RSBAC homepage]] as well as on the right sidebar box called <> of every page. Please consider using a [[mirrors]] near to you, to download releases in best conditions. To protect against buffer overflows, we recommend using Pageexec ([[http://pax.grsecurity.net|PaX]]) - their patches integrate nicely with RSBAC. ====== RSBAC admin utilities ====== Please remember that your RSBAC admin utilities version should match your RSBAC kernel patch version. You will also need the version specific kernel patch available in the section below, <> == Current Version: 1.4.5 == (//Released on Friday, August 20, 2010//) * RSBAC kernel Release Notes: [[@dl.php?file=code/1.4.5/changes-1.4.5.txt|changes-1.4.5.txt]] * RSBAC Admin Tools Release Notes: [[@dl.php?file=code/1.4.5/admin-changes-1.4.5.txt|admin-changes-1.4.5.txt]] * RSBAC Admin Tools: rsbac-admin-1.4.5 [ [[@dl.php?file=code/1.4.5/rsbac-admin-1.4.5.tar.bz2|bz2]] | [[@dl.php?file=code/1.4.5/rsbac-admin-1.4.5.tar.bz2.sha256sum|sha256]] | [[@dl.php?file=code/1.4.5/rsbac-admin-1.4.5.tar.bz2.asc|gpg]] ] [ [[@dl.php?file=code/1.4.5/rsbac-admin-1.4.5.tar.xz|lzma]] | [[@dl.php?file=code/1.4.5/rsbac-admin-1.4.5.tar.xz.sha256sum|sha256]] | [[@dl.php?file=code/1.4.5/rsbac-admin-1.4.5.tar.xz.asc|gpg]] ] * Please make sure you are using a recent version of the Dialog tool \\ \\ //[[@dl.php?file=code|Deprecated previous versions]]// \\ \\ //[[@dl.php?reset|Reset download mirror selection]]// ====== Kernel patches ====== == Current version: 1.4.5 == From RSBAC version 1.4.4 onwards, the RSBAC common archive has been included into the kernel patch. [[@dl.php?file=patches/1.4.5/|Download patches]] ====== Official Classic kernels ====== //Pre-patched, supported, and ready to compile kernels. Only contains RSBAC and the usual vanilla Linux kernel// == Current version: 1.4.5 == [[@dl.php?file=kernels/1.4.5/|Download kernels]] ====== 2.4 kernel support ====== The RSBAC team stopped 2.4 kernel support starting for the 1.4.2 RSBAC release. Only important security bugfixes will be ported and announced here. == Current version: 1.4.1 == //Released in February, 2009// * Base RSBAC archive Release Notes: [[@dl.php?file=code/1.4.1/changes-2.4-1.4.1.txt|changes-1.4.1.txt]] * Base RSBAC archive: rsbac-common-2.4-1.4.1 [ [[@dl.php?file=code/1.4.1/rsbac-common-2.4-1.4.1.tar.bz2|.tar.bz2]] | [[@dl.php?file=code/1.4.1/rsbac-common-2.4-1.4.1.tar.bz2.md5sum|md5sum]] ] * RSBAC Admin Tools Release Notes: [[@dl.php?file=code/1.4.1/admin-changes-1.4.1.txt|admin-changes-1.4.1.txt]] * RSBAC Admin Tools: rsbac-admin-1.4.1 [ [[@dl.php?file=code/1.4.1/rsbac-admin-1.4.1.tar.bz2|.tar.bz2]] | [[@dl.php?file=code/1.4.1/rsbac-admin-1.4.1.tar.bz2.md5sum|md5sum]] | [[@dl.php?file=code/1.4.1/rsbac-admin-1.4.1.tar.bz2.asc|gpg]] ] ====== Enhanced RSBAC kernels ====== //**Unsupported**: Contain all security fixes, possible hardening patches, [[wp>PaX]], RSBAC and are usually but not necessarily up to date// These kernels use the latest stable RSBAC release and the latest stable Linux kernel. Please note that these kernels might not be completely stable or up to date. They are only proposed as a convenient solution, but using a [[:download#official_classic_kernels|classic kernel]] and patching PaX by hand is advised. * [[http://enhanced.rsbac.org/|Enhanced RSBAC kernels (HTTP)]] * [[ftp://rsbac.org/enhanced|Enhanced RSBAC kernels (FTP)]] * [[:mirrors#enhanced_kernels|Mirrors]] * [[http://www.grsecurity.net/~paxguy1/|Paxguy1's PaX patches]] (for hand patching) ====== Debian, Ubuntu packages and repository ====== //**Unsupported**: but usually up to date// You can build RSBAC Debian packages from the source tarballs. However, for simplicity, you can use our repository of prebuild packages. They work fine with the current Debian stable and latest Ubuntu release. (It probably works with Ubuntu pre-releases and Debian unstable as well). The kernel package especially tracks the Debian stable kernel, so if you need a more recent kernel, roll your own :) To add our repository, you first need to import our packaging key (): ''Fingerprint: 07CC 72DF F773 B619 EC7A A807 838B D580 4DF9 DF9B'' # gpg --keyserver subkeys.pgp.net --recv-keys 0x4DF9DF9B && gpg --export 0x4DF9DF9B | sudo apt-key add - **Alternative:** # wget -O- http://www.rsbac.org/doc/gnupg/debian.rsbac.org.key | sudo apt-key add - Then add the repository to your list of repositories: # sudo gedit /etc/apt/sources.list add the lines: # deb http://debian.rsbac.org/ sid main And you're ready to go! # sudo apt-get update # sudo apt-get install rsbac-admin # apt-cache search linux-image rsbac linux-image-2.6.24.3-rsbac - Linux kernel binary image for version 2.6.24.3-rsbac # sudo apt-get install linux-image-2.6.24.3-rsbac ====== Third Party Binary Packages ====== Please also have a closer look at the [[@links#linux_distributions_with_rsbac|RSBAC ready distributions]]. ===== Fedora Core RPMs (DEPRECATED) ===== RPMs for Fedora Core are available here: * http://fedora.rsbac.org/ * ftp://rsbac.org/fedora/ Please note that these might also work on Redhat based Linux distributions, and that they are supported externally by Andrea Pasquinucci. For further information, please check the README files on this server. //Warning: these are old and deprecated kernels. If you wish to support Fedora with newer kernels, please contact us.// ====== Live CDs ====== Test RSBAC with a Debian based live CD, or use it on a USB key you can bring everywhere. It let you to fully test RSBAC functions without having to install it. Just insert the CD or USB key, and try it out ! http://livecd.rsbac.org/ ftp://rsbac.org/livecd/ ([[mirrors#rsbac_live-cd|mirrors]]) ====== Preversions of upcoming RSBAC releases ====== //These versions are not well tested but usually contain the most up to date RSBAC code// == Pre == Pre-versions show the current, mostly stable code. Some features might still be unfinished or unstable, and might break. [[@dl.php?file=pre/|Download pre-versions]] You can also get an instant tarball from the most current version: Kernel: [[http://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-2.6.git;a=snapshot;h=refs/heads/master;sf=tgz|Master (current) Git kernel]] Tools: [[http://git.rsbac.org/cgi-bin/gitweb.cgi?p=rsbac-admin.git;a=snapshot;h=refs/heads/master;sf=tgz|Master (current) Git rsbac-admin]] == GIT == RSBAC is developed with [[wp>git]]. All RSBAC code is kept in the GIT repositories at %%git://rsbac.org/%%, the read-only Web interface is available at http://git.rsbac.org/. The ''master'' branch includes the lastest fetch of Linus Torvalds linux-2.6.git repository. The subsequent branches, e.g. ''rsbac-1.4-2.6.33'' are following the stable kernel version releases. Previously, RSBAC was developed using SVN and SVK. The previous repositories can be found at: %%svn://rsbac.org/%% and the read-only Web interface is available at http://svn.rsbac.org/. The 2.4 Linux kernels are still maintained (but not officially supported) via SVN.