RSBAC Handbook Releases
Stable: 1.3.7
for kernels:
- 2.4.36
- 2.6.23.14
Devel 1.4: 1.4.0-rc3
for kernels:
- 2.4.36.9
- 2.6.27.5
Full RSBAC kernels
Lazy of patching ?
Get the already rsbac-patched kernel. Choose your flavor.
Classic kernels
Includes vanilla kernel with the RSBAC patch
- 2.6.23.14
- 2.4.35.3
Enhanced kernels
Kernels including latest security fixes, goodies, and of course PaX+RSBAC
- 2.6.23.15 (20080217)
- 2.4.36 (20080217)
Debian repository
Also works for Ubuntu and other Debian-based distributions, of course
SVN
Cutting edge RSBAC source code, can be unstable sometimes
Events
No events planned
2.4.19-UP-RSBAC-v1.2.1-Celeron-333-256MB
These Linux kernel compile benchmarks have been run on an Celeron-333 UP system with kernel 2.4.19 and RSBAC version 1.2.1.
Three runs each of ‘make clean && time make bzImage’ on the same plain 2.4.19 kernel source tree in single user mode after one untimed run produced the following average times in seconds:
| Kernel type | Total time | Kernel/Sys + User | Kernel/Sys time | User/Process time |
|---|---|---|---|---|
| Clean kernel | 747.97 | 745.85 | 34.68 | 711.17 |
| Maint kernel (no modules) | 753.09 (+0.68%) | 750.94 (+0.67%) | 38.61 (+11.33%) | 712.33 (+0.16%) |
| RC + AUTH, no other options | 758.62 (+1.42%) | 756.55 (+1.43%) | 44.89 (+29.44%) | 711.66 (+0.07%) |
| RC + AUTH, network support, full log settings, no other options | 765.18 (+2.30%) | 761.47 (+2.08%) | 49.60 (+43.02%) | 711.87 (+0.10%) |
| RC + AUTH + ACL, network support, full log settings, no other options | 773.22 (+3.38%) | 769.85 (+3.20%) | 59.12 (+70.47%) | 710.73 (-0.06%) |
| Default config: REG, FF, AUTH, RC, ACL, CAP, JAIL, network support, full log settings, but nothing logged | 779.46 (+4.21%) | 777.25 (+4.19%) | 63.28 (+82.47%) | 713.97 (+0.39%) |
| All options and models | 820.00 (+9.63%) | 816.97 (+9.52%) | 103.83 (+199.39%) | 713.14 (+0.28%) |
Numbers have not changed much from the previous benchmark. RC and AUTH are now with and without full network and logging options. Since the MS model was doing fine in the last benchmark, it had no extra runs this time.
With all models and options, 1.2.1 was a bit faster now than 1.2.0-pre6 was without MS and JAIL. Less than 10% overhead with all options sounds good enough to me.