Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id ; Wed, 16 Oct 2002 10:03:16 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id ; Wed, 16 Oct 2002 10:03:16 -0400 Received: from falcon.etf.bg.ac.yu ([147.91.8.233]:53206 "EHLO falcon.etf.bg.ac.yu") by vger.kernel.org with ESMTP id ; Wed, 16 Oct 2002 10:03:15 -0400 Date: Wed, 16 Oct 2002 16:08:54 +0200 (CEST) From: Bosko Radivojevic To: linux-kernel@vger.kernel.org Subject: Linux Security Protection System In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1699 Lines: 40 LinSec team is proud to announce first stable release of LinSec. LinSec, as the name says, is Linux Security Protection System. The main aim of LinSec is to introduce Mandatory Access Control (MAC) mechanism into Linux (as opposed to existing Discretionary Access Control mechanism). LinSec model is based on: * Capabilities * Filesystem Access Domains * IP Labeling Lists * Socket Access Control As for Capabilities, LinSec heavily extends the Linux native capability model to allow fine grained delegation of individual capabilities to both users and programs on the system. No more allmighty root! Filesystem Access Domain subsystem allows restriction of accessible filesystem parts for both individual users and programs. Now you can restrict user activities to only its home, mailbox etc. Filesystem Access Domains works on device, dir and individual file granularity. IP Labeling lists enable restriction on allowed network connections on per program basis. From now on, you may configure your policy so that no one except your favorite MTA can connect to remote port 25 Socket Access Control model enables fine grained socket access control by associating, with each socket, a set of capabilities required for a local process to connect to the socket. LinSec consists of two parts: kernel patch (currently for 2.4.18) and userspace tools. Detailed documentation, download & mailing list information - http://www.linsec.org - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/