Current version
Git/Latestdiff: 1.5.6
Latest Snapshots
Produced after each commit or rebase to new upstream version
GIT
RSBAC source code, can be unstable sometimes
No events planned
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
todo [2009/10/07 11:42] 127.0.0.1 (old revision restored) |
todo [2010/03/02 13:37] 127.0.0.1 (old revision restored) |
||
---|---|---|---|
Line 6: | Line 6: | ||
The RSBAC development team.// | The RSBAC development team.// | ||
- | === Done in svn === | ||
- | |||
- | * CAP and RC learning modes with global activation | ||
- | * Learn into transactions | ||
=== Planned for the next release 1.5 === | === Planned for the next release 1.5 === | ||
Line 23: | Line 19: | ||
* Include patches for standard system tools like ps,top,ls. | * Include patches for standard system tools like ps,top,ls. | ||
* (maybe - michal) Implement RSBAC in Xen hypervisor for inter-domain access control. There is actualy less to be done than for linux - not so many requests and interceptions. That would allow RSBAC to control how Xen domains can communicate with each other, possibly securing virtual machines against unknown vulnerabilities in Xen (that would normaly allow guests to break out from Xen and reach physical machine). | * (maybe - michal) Implement RSBAC in Xen hypervisor for inter-domain access control. There is actualy less to be done than for linux - not so many requests and interceptions. That would allow RSBAC to control how Xen domains can communicate with each other, possibly securing virtual machines against unknown vulnerabilities in Xen (that would normaly allow guests to break out from Xen and reach physical machine). | ||
+ | * Wrappers for rpm and dpkg to backup and restore attributes on package updates. | ||
=== After 1.5 === | === After 1.5 === | ||
Line 33: | Line 30: | ||
* ACL learning mode for RC roles and other target types. | * ACL learning mode for RC roles and other target types. | ||
* Tool to see all RSBAC managed properties applied to one object. | * Tool to see all RSBAC managed properties applied to one object. | ||
- | * More fine grained locking for hashed lists - or use RCU etc. (done on some parts?) | ||
- | * Wrappers for rpm and dpkg to backup and restore attributes on package updates. | ||
* Solution for rsbac_list_get_all_* with very long lists (>100000 entries), e.g. allow to specify an offset. | * Solution for rsbac_list_get_all_* with very long lists (>100000 entries), e.g. allow to specify an offset. | ||