Documentation

Manpages

This article describes how to run a VM on a host which has RSBAC + PaX enabled.

My choice is KVM, because it is the easiest to use and already included in the mainline kernel. It performs so well that you can work on the guest system without even noticing that it is a VM.

To get more security than basic the distributions offers

• Install gentoo-hardened
• Run the guest process as an unpriviliged user (see HowTo)
• Setup rsbac_jail to start kvm-guest (see kvm guest jail)

run-jail is a script wich allow us to setup the rsbac-jail with a configurationfile.

This is the documentation site for rsbac_jail

Since the rsbac have now the possibility to use learning mechanisms, it is now quite easy to use this module. It can be quite useful even on a desktop system. More details soon. (31.01.2010)

• RC Module

This setup is now deprecated (25.02.2010)

• RC Module
• Setup for login (local and remote examples)
• Setup for syslog and rklogd
• Setup for webserver (apache2 as exemple)

It can be generated with

rc_get_item  -v -p htmlprint > rc_03.05.2009.html

A nice overview

• Testing RC setup

• patches