Re: Gentoo reintroduction of rsbac-sources
Jens Kasten <[email protected]>
| Newsgroups | gmane.linux.rsbac |
|---|---|
| Message-ID | <[email protected]> |
Hi Anthony, its nice to hear such. :) On Sat, 07 Jan 2012 16:08:56 -0500, "Anthony G. Basile" <[email protected]> wrote: > Hi everyone, > > A long time ago, Gentoo used to provide RSBAC sources. For those of > you > unfamiliar with RSBAC = rules set based access control, it provides > hardening similar to grsec. See their web page at: > > https://www.rsbac.org > > These patches were eventually removed because of waning activity, but > recently Amon Ott and his team started working on RSBAC and there has > been renewed interest within the community. You can see their > activity > on their repos: > > http://git.rsbac.org/cgi-bin/gitweb.cgi > > So, I put the rsbac admin tool and kernel sources on my overlay and > Issiah Hill started testing them. I think we've progressed to the > point > where we can reintroduce those kernel sources back into the gentoo > tree, > so I did. > > The new packages are > > 1) sys-kernel/rsbac-sources = vanilla linux 3.1.5 + genpatches + > rsbac > patches. They do NOT at present contain the pax patches, but will in > the next rev bump. > > 2) sys-apps/rsbac-admin = the admin tool for rsbac > > At this point, everything is experimental and I would not recommend > them > for a production server. But they are there now for testing and > hopefully full stabilization. I welcome feedback from both our users > and the RSBAC team.