Rule Set Based Access Control 1.4.0pre1 (Testing branch) |
|
|
Thursday November 29, 2007. 06:29 PM FreshMeat
Rule Set Based Access Control (RSBAC) is a Free Software security extension for current Linux kernels. It is based on the Generalized Framework for Access Control (GFAC) by Abrams and LaPadula and provides a flexible system of access control based on several modules. All security relevant system calls are extended by security enforcement code. This code calls the central decision component, which in turn calls all active decision modules and generates a combined decision. This decision is then enforced by the system call extensions.
License: GNU General Public License (GPL)
Changes:
This version includes all the bugfixes from
version 1.3.6, as well as the new virtual user
management feature. This feature lets you have
many virtual user sets in your system. As an
example, you can start your mail server in a
different set, and the users you're getting mail
to will not be any of the system users. Likewise,
your jails can be started in a different set so
that the users in that jail will never be the same
ones as the real system users.
|