Gentoo reintroduction of rsbac-sources
"Anthony G. Basile" <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened,gmane.linux.rsbac |
|---|---|
| Message-ID | <[email protected]> |
Hi everyone,
A long time ago, Gentoo used to provide RSBAC sources. For those of you
unfamiliar with RSBAC = rules set based access control, it provides
hardening similar to grsec. See their web page at:
https://www.rsbac.org
These patches were eventually removed because of waning activity, but
recently Amon Ott and his team started working on RSBAC and there has
been renewed interest within the community. You can see their activity
on their repos:
http://git.rsbac.org/cgi-bin/gitweb.cgi
So, I put the rsbac admin tool and kernel sources on my overlay and
Issiah Hill started testing them. I think we've progressed to the point
where we can reintroduce those kernel sources back into the gentoo tree,
so I did.
The new packages are
1) sys-kernel/rsbac-sources = vanilla linux 3.1.5 + genpatches + rsbac
patches. They do NOT at present contain the pax patches, but will in
the next rev bump.
2) sys-apps/rsbac-admin = the admin tool for rsbac
At this point, everything is experimental and I would not recommend them
for a production server. But they are there now for testing and
hopefully full stabilization. I welcome feedback from both our users
and the RSBAC team.
--
Anthony G. Basile, Ph.D.
Gentoo Linux Developer [Hardened]
E-Mail : [email protected]
GnuPG FP : 8040 5A4D 8709 21B1 1A88 33CE 979C AF40 D045 5535
GnuPG ID : D0455535