=>  RSBAC Handbook

RSBAC Handbook

Preface

Introduction

Architecture

User Management

Security Modules

Installation

Configuration

Maintenance

Appendixes

=>  Releases

Stable: 1.4.2
kernel:

  • 2.6.30+

Full RSBAC kernels
Lazy of patching ? Get the already rsbac-patched kernel. Choose your flavor.

Classic kernels
Includes vanilla kernel with the RSBAC patch

  • 2.6.30

Enhanced kernels
Kernels including latest security fixes, goodies, and of course PaX+RSBAC

  • 2.6.27.10 (20090112)

Debian repository
Also works for Ubuntu and other Debian-based distributions, of course

SVN | GIT | Git Web
Cutting edge RSBAC source code, can be unstable sometimes

=>  Events

No events planned

RSBAC Handbook

  1. Preface
    1. Recent Changes
    2. Feedback
    3. Conventions Used
    4. Acknowledgements
    5. Contacts
    6. Development
    7. Professional Support
  2. Introduction to RSBAC
    1. History
    2. Feature List
    3. Design Goals
    4. Areas of Use
    5. Compatibility
  3. Architecture and Implementation
    1. Subjects and Objects
    2. Request Types
    3. Framework Components
      1. Access Control Enforcement Facility (AEF)
      2. Access Control Decision Facility (ADF)
      3. Data Structures Component
      4. Interfaces
      5. Logging Facility
      6. Runtime Registration
  4. User Management
  5. Security Modules
    1. Authenticated User (AUTH)
    2. Role Compatibility (RC)
    3. Access Control Lists (ACL)
    4. Mandatory Access Control (MAC)
    5. PaX (PAX)
    6. Dazuko Malware Scanner (DAZ)
    7. Linux Capabilities (CAP)
    8. Jail (JAIL)
    9. Linux Resources (RES)
    10. File Flags (FF)
    11. Privacy Model (PM)
  6. Installation
    1. Choosing the Right Package
    2. Installing from Source
      1. Linux Kernel
      2. Administration Tools
    3. First Boot
  7. Configuration
    1. System Base
    2. Service Encapsulation
    3. User Management
    4. Logging
    5. Selecting a Security Model Combination
    6. Breaking the Requirements into Model Specific Designs
    7. Setting up Modules
      1. AUTH: Authentication Enforcement
      2. RC: Role Compatibility
      3. JAIL: Process Jails
      4. CAP: Linux Capabilities
      5. PAX: PaX Support
      6. FF: File Flags
      7. RES: Resource Control
      8. ACL: Access Control Lists
      9. MAC: Mandatory Access Control
      10. PM: Privacy Model
      11. DAZ: Dazuko Malware Scanner
    8. Administration Examples
  8. Maintenance
    1. Upgrade and Migration
    2. Backup and Restore
  9. Appendixes
    1. RSBAC Reference
      1. Kernel Boot Parameters
      2. proc Interface
      3. Targets and Requests
      4. Error Codes
    2. RSBAC Benchmarks

—- The handbook is published under the CCPL license.

 

documentation/rsbac_handbook.txt · Last modified: 2009/01/12 12:49 by kang
This website is kindly hosted by m-privacy