RSBAC Handbook
Releases
Stable: 1.4.3
kernel:
Full RSBAC kernels
Lazy of patching ?
Get the already rsbac-patched kernel. Choose your flavor.
Classic kernels
Includes vanilla kernel with the RSBAC patch
Enhanced kernels
PaX+RSBAC kernels
Debian repository
Also works for Ubuntu and other Debian-based distributions, of course
GIT
Cutting edge RSBAC source code, can be unstable sometimes
Events
No events planned
Before starting with Resource Control (RES) module administration, your should read the RES description.
RES administration only changes the res_min and res_max attributes of files and the res_role, res_min and res_max attribute of users. This can either be done with rsbac_fd_menu and rsbac_user_menu or with the command line tools attr_get_file_dir, attr_set_file_dir, attr_get_user and attr_set_user.
The res_role value determines user access to both attributes: normal users have no access, system admins have read access and security officer has full access.
Example to set max number of processes for user joe:
attr_set_user RES joe res_max nproc 100
List known resources:
attr_get_user -R
Table of Contents: RSBAC Handbook
Previous: FF
Next: ACL
Alternative: Setting up Modules