documentation:rsbac_handbook:preface:about_rsbac:features
Releases
Current version
Git/Latestdiff: 1.5.6
Latest Snapshots
Produced after each commit or rebase to new upstream version
GIT
RSBAC source code, can be unstable sometimes
Events
No events planned
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revision | |||
| documentation:rsbac_handbook:preface:about_rsbac:features [2006/05/18 07:33] – ao | documentation:rsbac_handbook:preface:about_rsbac:features [2006/05/18 08:34] (current) – removed kang | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ===== RSBAC Features ===== | ||
| - | |||
| - | //This document list the features provided by RSBAC. In other words, this is what you get by running a RSBAC kernel.// | ||
| - | |||
| - | //Currently non ordered, non complete list// | ||
| - | |||
| - | * Read-only mode (no attribute writing, for testing) | ||
| - | * Transactions support (policy changes can be made atomically) | ||
| - | * Generic list based attributes (objects attributes from all models are stored into hashed, generic lists) | ||
| - | * In kernel user management (no more / | ||
| - | * Network control support | ||
| - | * Pseudonymous logging (for privacy concerns) | ||
| - | * Extensive logging capabilities | ||
| - | * Symlink redirection (symlinks can redirect to another location by role, by uid, by security level or by remote address) | ||
| - | * Can disable Linux DAC (be sure to convert them with provided tool to RSBAC ACL first) | ||
| - | * Secure delete (mandatory secure deletion per file, directory or whole filesystem) | ||
| - | * Hide processes easily with a kernel option | ||
| - | * Freeze mode (no RSBAC setting can be changed until reboot) | ||
| - | * Softmode (RSBAC running in non-enforcing mode, can be disabled per single boot) | ||
| - | * X11 Support | ||
| - | * Inherited attributes (easy administration) | ||
| - | * Fast, low overhead solution | ||
| - | |||
| - | |||
| - | //You can find more information about modules by reading the [[documentation: | ||
| - | |||
| - | * Registration modules (security models can be easily added this way) | ||
| - | * AUTH module (checks everything about user authentication) | ||
| - | * RC module (Role based model) | ||
| - | * ACL module | ||
| - | * MAC module | ||
| - | * PaX support | ||
| - | * Dazuko antivirus interface, with caching | ||
| - | * CAP module (Linux capacities control) | ||
| - | * JAIL module (seamless, secure chroot, a simple rsbac_jail < | ||
| - | * RES module (Linux system resources control) | ||
| - | * FF module (Special RSBAC attributes) | ||
| - | * PM module (Privacy Module) | ||
| - | |||
| - | \\ | ||
| - | ---- | ||
| - | **Table of Contents:** [[documentation: | ||
| - | **Previous: | ||
| - | **Next:** [[documentation: | ||
documentation/rsbac_handbook/preface/about_rsbac/features.1147937597.txt.gz · Last modified: 2006/05/18 08:34 (external edit)