Releases
Stable: 1.3.7
for kernels:
- 2.4.36
- 2.6.23.14
Devel 1.4: 1.4.0-pre1
for kernels:
- 2.4.35.4
- 2.6.23.9
Full RSBAC kernels
Lazy of patching ?
Get the already rsbac-patched kernel. Choose your flavor.
Classic kernels
Includes vanilla kernel with the RSBAC patch
- 2.6.23.14
- 2.4.35.3
Enhanced kernels
Kernels including latest security fixes, goodies, and of course PaX+RSBAC
- 2.6.23.15 (20080217)
- 2.4.36 (20080217)
Debian repository
Also works for Ubuntu and other Debian-based distributions, of course
SVN
Cutting edge RSBAC source code, can be unstable sometimes
Events
No events planned
Virtuelle Machine on RSBAC-System
Running a VM on a host wich has RSBAC + PaX as kernelfeatures.
My choose is the KVM, because ist the easiest for use and already included in the the mainline kernel. Its has enough performace to work on the guest without knowing that it’s a virtualized machine.
prepear the hostsystem
To get more security as the basic distributions offers, to protect the hostsystem
I did this:
- installed the gentoo-hardened
- running the guestprocess as unpriviliged user (see HowTo)
- setup rsbac_jail to start kvm-guest with it (see kvm guest jail)
RSBAC-Jail
run-jail is a script wich allow us to setup the rsbac-jail with a configurationfile.
This is the documentation site for rsbac_jail