We recommend you to read about SSP/PIE and the PaX module. You might want to choose a special Linux distribution to handle this kind of binaries for you. (Namely, Gentoo Hardened, or Adamantix for example)

A special guide exists to install RSBAC on Gentoo:

• http://hardened.gentoo.org/rsbac

To make it short, you need to run as root user:

# emerge rsbac-sources rsbac-admin

There is no manual for Adamantix, however RSBAC is integrated by default. You may find more information on their website.

• http://www.adamantix.org/
• http://rsbac.adamantix.org/ (RSBAC related tools)
• http://wiki.adamantix.org/ (Wiki documentation)

Debian provides RSBAC packages in the unstable branch. They are often outdated, so you might not want to use them.

You can, however, compile your kernel from source and create a Debian package from the RSBAC source admin tool package (debian files are already provided).

A complete debian guide on how to create .deb packages is available online at debian.org.

However, if you are familiar with the process, you simply need to unpack the rsbac admin tool archive and issue this command:

dpkg --build rsbac-admin-<version> rsbac-admin-<version>.deb

and install it:

dpkg --install rsbac-admin-<version>.deb

Note: Adamantix is a Debian based distribution providing native RSBAC support.

You can download the RPMs for Fedora here:

• Fedora Core RPMs

There are particular installation instructions for Fedora, provided by Andrea Pasquinucci here:

• http://fedora.rsbac.org/4_ws/INSTALL

RSBAC is installed by default with Mandriva kernels. To enable it, you simply need to install the rsbac-admin package using their graphical tool, and to pass the rsbac_on kernel argument at system boot.

RSBAC might be automatically set up and enabled in future Mandriva versions.

Table of Contents: RSBAC Handbook
Previous: Installation
Next: Installing from Source