Releases
Stable: 1.3.7
for kernels:
Devel 1.4: 1.4.0-pre1
for kernels:
Full RSBAC kernels
Lazy of patching ?
Get the already rsbac-patched kernel. Choose your flavor.
Classic kernels
Includes vanilla kernel with the RSBAC patch
Enhanced kernels
Kernels including latest security fixes, goodies, and of course PaX+RSBAC
Debian repository
Also works for Ubuntu and other Debian-based distributions, of course
SVN
Cutting edge RSBAC source code, can be unstable sometimes
Events
No events planned
All the RSBAC code is copyrighted © 1997-2007 by Amon Ott ao@rsbac.org (except where explicitly stated otherwise in the code), and published under the GNU General Publishing License v2.
Please consult the RSBAC copyright notice for details.
The RSBAC source code depends on original Linux kernel source trees.
Only recent kernels are supported. If you need support for other kernel versions, please give us a note. All source packages have been signed either with Amon Ott’s (GnuPG, PGP) key or kang’s GnuPG key.
Please follow the documentation for installation instructions and user manual.
Updates are posted on the RSBAC homepage as well as on the right sidebar box called «Releases» of every page. Please consider using a mirrors near to you, to download releases in best conditions.
To protect against buffer overflows, we recommend using Pageexec (PaX) - their patches integrate nicely with RSBAC, as shown in the Gentoo distribution.
Please remember that your RSBAC admin utilities version must match your RSBAC kernel patch version. You will find the base RSBAC archive in this section, as well as corresponding RSBAC admin utilities. You also need the version specific kernel patch available in the section below, «Kernel patches»
(Released on Tuesday, February 19, 2008)
Deprecated previous versions
Reset download mirror selection
Pre-patched, supported, and ready to compile kernels. Only contains RSBAC and the usual vanilla Linux kernel
Unsupported: Contain all security fixes, possible hardening patches, PaX, RSBAC and are usually up to date
These kernels use the latest stable RSBAC release and the latest stable Linux kernel. Please note that these kernels might not be fully stable, and that they are not gpg signed.
Unsupported: but usually up to date
You can build RSBAC Debian packages from the source tarballs. However, for simplicity, you can use our repository of prebuild packages. They work fine with the current Debian stable and latest Ubuntu release. (It probably works with Ubuntu pre-releases and Debian unstable as well).
The kernel package especially tracks the Debian stable kernel, so if you need a more recent kernel, roll your own :)
To add our repository, you first need to import our packaging key (debian@rsbac.org):
Fingerprint: 07CC 72DF F773 B619 EC7A A807 838B D580 4DF9 DF9B
# gpg --keyserver subkeys.pgp.net --recv-keys 0x4DF9DF9B && gpg --export 0x4DF9DF9B | sudo apt-key add -
Alternative:
# wget -O- http://www.rsbac.org/doc/gnupg/debian.rsbac.org.key | sudo apt-key add -
Then add the repository to your list of repositories:
# sudo gedit /etc/apt/sources.list
add the lines:
#Stable packages deb http://debian.rsbac.org/ etch main #Uncomment to get the unstable packages #deb http://debian.rsbac.org/ sid main
And you’re ready to go!
# sudo apt-get update # sudo apt-get install rsbac-admin # apt-cache search linux-image rsbac linux-image-2.6.24.3-rsbac - Linux kernel binary image for version 2.6.24.3-rsbac # sudo apt-get install linux-image-2.6.24.3-rsbac
Please also have a closer look at the RSBAC ready distributions.
RPMs for Fedora Core are available here:
Please note that these might also work on Redhat based Linux distributions, and that they are supported externally by Andrea Pasquinucci. For further information, please check the README files on this server.
Test RSBAC with a Debian based live CD, or use it on a USB key you can bring everywhere.
It let you to fully test RSBAC functions without having to install it.
Just insert the CD or USB key, and try it out !
(mirrors)
These versions are not well tested but usually contain the most up to date RSBAC code
Pre-versions show the current, mostly stable code. Some features might still be unfinished or unstable, and might break.
RSBAC is developed with subversion.
All RSBAC code is kept in the subversion repositories at svn://rsbac.org/, the read-only Web interface is available at http://svn.rsbac.org. As we are using SVK over subversion, code can be (and mostly is) signed with GnuPG. The latest admin tools code is always available under trunk, while the latest kernel code lives in the linux-rsbac branch. The tags will show released versions.