Releases
Stable: 1.4.4
kernel:
Full RSBAC kernels
Lazy of patching ?
Get the already rsbac-patched kernel. Choose your flavor.
Classic kernels
Includes vanilla kernel with the RSBAC patch
Enhanced kernels
PaX+RSBAC kernels
Debian repository
Also works for Ubuntu and other Debian-based distributions, of course
GIT
Cutting edge RSBAC source code, can be unstable sometimes
Kernel | Tools
Events
No events planned
All the RSBAC code is copyrighted © 1997-2010 by Amon Ott ao@rsbac.org (except where explicitly stated otherwise in the code), and published under the GNU General Publishing License v2.
Please consult the RSBAC copyright notice for details.
The RSBAC source code depends on original Linux kernel source trees.
Only recent kernels are supported. If you need support for other kernel versions, please give us a note. All source packages have been signed either with Amon Ott’s (GnuPG, PGP) key or kang’s GnuPG key.
Please follow the documentation for installation instructions and user manual.
Updates are posted on the RSBAC homepage as well as on the right sidebar box called «Releases» of every page. Please consider using a mirrors near to you, to download releases in best conditions.
To protect against buffer overflows, we recommend using Pageexec (PaX) - their patches integrate nicely with RSBAC.
Please remember that your RSBAC admin utilities version should match your RSBAC kernel patch version. You will also need the version specific kernel patch available in the section below, «Kernel patches»
(Released on Wednesday, April 21, 2010)
Deprecated previous versions
Reset download mirror selection
From RSBAC version 1.4.4 onwards, the RSBAC common archive has been included into the kernel patch.
Pre-patched, supported, and ready to compile kernels. Only contains RSBAC and the usual vanilla Linux kernel
The RSBAC team stopped 2.4 kernel support starting for the 1.4.2 RSBAC release. Only important security bugfixes will be ported and announced here.
Released in February, 2009
Unsupported: Contain all security fixes, possible hardening patches, PaX, RSBAC and are usually but not necessarily up to date
These kernels use the latest stable RSBAC release and the latest stable Linux kernel. Please note that these kernels might not be completely stable or up to date. They are only proposed as a convenient solution, but using a classic kernel and patching PaX by hand is advised.
Unsupported: but usually up to date
You can build RSBAC Debian packages from the source tarballs. However, for simplicity, you can use our repository of prebuild packages. They work fine with the current Debian stable and latest Ubuntu release. (It probably works with Ubuntu pre-releases and Debian unstable as well).
The kernel package especially tracks the Debian stable kernel, so if you need a more recent kernel, roll your own :)
To add our repository, you first need to import our packaging key (debian@rsbac.org):
Fingerprint: 07CC 72DF F773 B619 EC7A A807 838B D580 4DF9 DF9B
# gpg --keyserver subkeys.pgp.net --recv-keys 0x4DF9DF9B && gpg --export 0x4DF9DF9B | sudo apt-key add -
Alternative:
# wget -O- http://www.rsbac.org/doc/gnupg/debian.rsbac.org.key | sudo apt-key add -
Then add the repository to your list of repositories:
# sudo gedit /etc/apt/sources.list
add the lines:
# deb http://debian.rsbac.org/ sid main
And you’re ready to go!
# sudo apt-get update # sudo apt-get install rsbac-admin # apt-cache search linux-image rsbac linux-image-2.6.24.3-rsbac - Linux kernel binary image for version 2.6.24.3-rsbac # sudo apt-get install linux-image-2.6.24.3-rsbac
Please also have a closer look at the RSBAC ready distributions.
RPMs for Fedora Core are available here:
Please note that these might also work on Redhat based Linux distributions, and that they are supported externally by Andrea Pasquinucci. For further information, please check the README files on this server.
Warning: these are old and deprecated kernels. If you wish to support Fedora with newer kernels, please contact us.
Test RSBAC with a Debian based live CD, or use it on a USB key you can bring everywhere.
It let you to fully test RSBAC functions without having to install it.
Just insert the CD or USB key, and try it out !
(mirrors)
These versions are not well tested but usually contain the most up to date RSBAC code
Pre-versions show the current, mostly stable code. Some features might still be unfinished or unstable, and might break.
You can also get an instant tarball from the most current version:
Kernel: Master (current) Git kernel
RSBAC is developed with git.
All RSBAC code is kept in the GIT repositories at git://rsbac.org/, the read-only Web interface is available at http://git.rsbac.org/.
The master branch includes the lastest fetch of Linus Torvalds linux-2.6.git repository. The subsequent branches, e.g. rsbac-1.4-2.6.33 are following the stable kernel version releases.
Previously, RSBAC was developed using SVN and SVK. The previous repositories can be found at: svn://rsbac.org/ and the read-only Web interface is available at http://svn.rsbac.org/.
The 2.4 Linux kernels are still maintained (but not officially supported) via SVN.