=>  Releases

Stable: 1.4.4
kernel:

  • 2.6.33+

Full RSBAC kernels
Lazy of patching ? Get the already rsbac-patched kernel. Choose your flavor.

Classic kernels
Includes vanilla kernel with the RSBAC patch

  • 2.6.33

Enhanced kernels
PaX+RSBAC kernels

  • 2.6.33 (20100421)

Debian repository
Also works for Ubuntu and other Debian-based distributions, of course

GIT
Cutting edge RSBAC source code, can be unstable sometimes
Kernel | Tools

=>  Events

No events planned



All the RSBAC code is copyrighted © 1997-2010 by Amon Ott ao@rsbac.org (except where explicitly stated otherwise in the code), and published under the GNU General Publishing License v2. Please consult the RSBAC copyright notice for details.





The RSBAC source code depends on original Linux kernel source trees.

Only recent kernels are supported. If you need support for other kernel versions, please give us a note. All source packages have been signed either with Amon Ott’s (GnuPG, PGP) key or kang’s GnuPG key.

Please follow the documentation for installation instructions and user manual.

Updates are posted on the RSBAC homepage as well as on the right sidebar box called «Releases» of every page. Please consider using a mirrors near to you, to download releases in best conditions.

To protect against buffer overflows, we recommend using Pageexec (PaX) - their patches integrate nicely with RSBAC.

RSBAC admin utilities

Please remember that your RSBAC admin utilities version should match your RSBAC kernel patch version. You will also need the version specific kernel patch available in the section below, «Kernel patches»

Current Version: 1.4.4

(Released on Wednesday, April 21, 2010)



Deprecated previous versions

Reset download mirror selection

Kernel patches

Current version: 1.4.4

From RSBAC version 1.4.4 onwards, the RSBAC common archive has been included into the kernel patch.

Download patches

Official Classic kernels

Pre-patched, supported, and ready to compile kernels. Only contains RSBAC and the usual vanilla Linux kernel

Current version: 1.4.4

2.4 kernel support

The RSBAC team stopped 2.4 kernel support starting for the 1.4.2 RSBAC release. Only important security bugfixes will be ported and announced here.

Current version: 1.4.1

Released in February, 2009

Enhanced RSBAC kernels

Unsupported: Contain all security fixes, possible hardening patches, PaX, RSBAC and are usually but not necessarily up to date

These kernels use the latest stable RSBAC release and the latest stable Linux kernel. Please note that these kernels might not be completely stable or up to date. They are only proposed as a convenient solution, but using a classic kernel and patching PaX by hand is advised.

Debian, Ubuntu packages and repository

Unsupported: but usually up to date

You can build RSBAC Debian packages from the source tarballs. However, for simplicity, you can use our repository of prebuild packages. They work fine with the current Debian stable and latest Ubuntu release. (It probably works with Ubuntu pre-releases and Debian unstable as well).

The kernel package especially tracks the Debian stable kernel, so if you need a more recent kernel, roll your own :)

To add our repository, you first need to import our packaging key (debian@rsbac.org):

Fingerprint: 07CC 72DF F773 B619 EC7A A807 838B D580 4DF9 DF9B

# gpg --keyserver subkeys.pgp.net --recv-keys 0x4DF9DF9B &&  gpg --export 0x4DF9DF9B | sudo apt-key add -

Alternative:

# wget -O- http://www.rsbac.org/doc/gnupg/debian.rsbac.org.key | sudo apt-key add -

Then add the repository to your list of repositories:

# sudo gedit /etc/apt/sources.list

add the lines:

# deb http://debian.rsbac.org/ sid main

And you’re ready to go!

# sudo apt-get update
# sudo apt-get install rsbac-admin
# apt-cache search linux-image rsbac
linux-image-2.6.24.3-rsbac - Linux kernel binary image for version 2.6.24.3-rsbac
# sudo apt-get install linux-image-2.6.24.3-rsbac

Third Party Binary Packages

Please also have a closer look at the RSBAC ready distributions.

Fedora Core RPMs (DEPRECATED)

RPMs for Fedora Core are available here:

Please note that these might also work on Redhat based Linux distributions, and that they are supported externally by Andrea Pasquinucci. For further information, please check the README files on this server.

Warning: these are old and deprecated kernels. If you wish to support Fedora with newer kernels, please contact us.

Live CDs

Test RSBAC with a Debian based live CD, or use it on a USB key you can bring everywhere.

It let you to fully test RSBAC functions without having to install it.

Just insert the CD or USB key, and try it out !

http://livecd.rsbac.org/

ftp://rsbac.org/livecd/

(mirrors)

Preversions of upcoming RSBAC releases

These versions are not well tested but usually contain the most up to date RSBAC code

Pre

Pre-versions show the current, mostly stable code. Some features might still be unfinished or unstable, and might break.

Download pre-versions

You can also get an instant tarball from the most current version:

Kernel: Master (current) Git kernel

Tools: Master (current) Git rsbac-admin

GIT

RSBAC is developed with git.

All RSBAC code is kept in the GIT repositories at git://rsbac.org/, the read-only Web interface is available at http://git.rsbac.org/.

The master branch includes the lastest fetch of Linus Torvalds linux-2.6.git repository. The subsequent branches, e.g. rsbac-1.4-2.6.33 are following the stable kernel version releases.

Previously, RSBAC was developed using SVN and SVK. The previous repositories can be found at: svn://rsbac.org/ and the read-only Web interface is available at http://svn.rsbac.org/.

The 2.4 Linux kernels are still maintained (but not officially supported) via SVN.

 

download.txt · Last modified: 2010/04/21 16:39 by kang
This website is kindly hosted by m-privacy