RSBAC installation is pretty straight forward. You do not need to reinstall a complete system, thus, upgrading your Linux system to RSBAC is an easy task.

• Installing from packages is the easy way and supported for your Linux distribution.
• Installing from source require a bit more knowledge and handwork, but it might offer you more flexibility (you could add your own additional patches).

The RSBAC access control framework, while giving a global system protection through mandatory privilege separation does not solve every security issue. It is advised to use a SSP and PIE aware distribution.

We suggest you to read about Stack-smashing_protection (SSP) and Position_independent_code (PIE) first, for more information about these technologies.

To this day, the only distribution using these features, that we are aware of is Hardened Gentoo.

Table of Contents: RSBAC Handbook
Previous: Security Models
Next: Choosing the right package
Alternative: Installing from source