Friday, 27/Nov/2009

RSBAC 1.4.3 has been released for kernel 2.6.31.6.

This release focus on adding new learning mode for the RC and CAP modules. We hope you will enjoy it!

Most Important changes since 1.4.2:

• Make RCU rate limit boot and runtime configurable
• Move AUTH auth_program_file kernel-only attribute to GEN program_file
• Implement CAP learning mode for user and program max_caps
• Add global RC learning mode for role rights to types
• Optionally put learning mode results into transactions, one per module
• Show program path in AUTH learning messages
• Allow SCD mlock in PM
• New kernel config RSBAC_SWITCH_BOOT_OFF: 'Allow to switch modules off with kernel parameter'
• Show transaction number in learning info messages.
• Add transaction names for human use and set names for learn transactions.
• Use -I to backup extra groups in rsbac_usershow backup mode.
• New rsbac_usermod parameter -I to set a list of extra groups.
• Add rsbac_usershow -r parameter to add -r to rsbac_useradd in backup mode.
• Add rsbac_useradd -r and -R parameters to (un)conditionally replace existing.
• And of course, many bug fixes

The complete lists are available here:

changes-1.4.3.txt

admin-changes-1.4.3.txt

Upgrading from 1.3 or 1.4.x is easy: Compile, install and boot. Some extra checks might require minor adjustments, though.