RSBAC Handbook Releases
Stable: 1.3.7
for kernels:
- 2.4.36
- 2.6.23.14
Devel 1.4: 1.4.0-rc3
for kernels:
- 2.4.36.9
- 2.6.27.5
Full RSBAC kernels
Lazy of patching ?
Get the already rsbac-patched kernel. Choose your flavor.
Classic kernels
Includes vanilla kernel with the RSBAC patch
- 2.6.23.14
- 2.4.35.3
Enhanced kernels
Kernels including latest security fixes, goodies, and of course PaX+RSBAC
- 2.6.23.15 (20080217)
- 2.4.36 (20080217)
Debian repository
Also works for Ubuntu and other Debian-based distributions, of course
SVN
Cutting edge RSBAC source code, can be unstable sometimes
Events
No events planned
2.4.6-UP-RSBAC-v1.1.2-pre8-Celeron-333-256MB
These Linux kernel compile benchmarks have been run on an Celeron-333 UP system with kernel 2.4.6 and RSBAC version 1.1.2-pre8. Three runs each of ‘time make bzImage’ on a 2.4.6 kernel source tree in single user mode after one untimed run produced the following average times in seconds:
| Kernel type | Total time | Kernel/Sys + User | Kernel/Sys time | User/Process time |
|---|---|---|---|---|
| Clean kernel | 711.75 | 711.74 | 34.83 | 676.91 |
| Maint kernel (no modules, no debug code) | 719.09 (+1.03%) | 719.09 (+1.03%) | 41.02 (+17.77%) | 678.07 (+0.17%) |
| Maint kernel (no modules) | 719.20 (+1.05%) | 719.19 (+1.05%) | 39.04 (+12.09%) | 680.15 (+0.48%) |
| RC + AUTH, no other options | 719.36 (+1.07%) | 719.35 (+1.07%) | 45.41 (+30.38%) | 673.94 (-0.44%) |
| AUTH + ACL, no other options | 721.18 (+1.32%) | 721.19 (+1.33%) | 44.56 (+27.94%) | 676.63 (-0.04%) |
| Default config: REG, FF, AUTH, RC, ACL modules, all log settings, but nothing logged | 729.33 (+2.47%) | (+2.47%) | 52.76 (+51.48%) | 676.57 (-0.05%) |
| All options and models, except MS | 763.35 (+7.25%) | 763.07 (+7.21%) | 81.63 (+134.37%) | 681.44 (+0.67%) |
| All options and models | 854.69 (+20.08%) | 854.21 (+20.02%) | 169.65 (+387.08%) | 684.56 (+1.13%) |
The significant kernel time increase with all models is mostly due to the MS model with read check enabled, which marks all files ever read as scanned and thus produces a huge amount of attribute objects in large lists. The list handling will be optimized for 1.2.0.