Thursday, 11/Jan/2007

RSBAC 1.3.1 has been released for both kernels 2.4.34 and 2.6.19.2.

Improvements over 1.3.0:

• Add xstats counter for get_parent calls.
• Fix sort order of network templates.
• Add missing DAZ request in vector. Add role number in RC syscall denied log message.
• Create bitmasks for each module of which requests it is interested in and only call request_xy and set_attr_xy, if necessary.
• Small performance tuning: removed usage of rsbac_list_compare_u32 (always use memcmp which is asm-tuned per arch)
• Reduce stack usage in list, ACL and RC init.
• Optimize list hash functions with bit masks instead of % operation.
• Fixed LVM/MD issues with rsbac automounting.
• Rewritten the way rsbac_jail is entering new namespace. Now works correctly :)