RSBAC (Rule Set Based Access Control) is a kernel patch which adds several mandatory access models to the Linux kernel. These models can be used to enhance the security of a Linux system.
RSBAC’s main concept is modularity. It uses several well-known and new security models, including Mandatory Access Control (MAC), Access Control List (ACL), PaX and Role-Compatibility (RC) and others.
RSBAC has control over individual users and program network accesses using any combination of the possible security models. It is also highly extensible.
Features include:
- Independent of governments and big companies.
- Several well-known and new security models, e.g. MAC, ACL and RC.
- On-access virus scanning with Dazuko interface.
- Detailed control over individual user and program network accesses.
- Fully access controlled kernel level user management.
- Any combination of security models possible.
- Easily extensible: write your own model for runtime registration.
- Support for latest kernels.
- Stable for production use.
- Read-only mode (no attribute writing, for testing).
- Transactions support (policy changes can be made atomically).
- Generic list based attributes (objects attributes from all models are stored into hashed, generic lists).
- In kernel user management (no more /etc/passwd).
- Network control support.
- Pseudonymous logging (for privacy concerns).
- Extensive logging capabilities.
- Symlink redirection (symlinks can redirect to another location by role, by uid, by security level or by remote address).
- Disable Linux DAC (be sure to convert them with provided tool to RSBAC ACL first).
- Secure delete (mandatory secure deletion per file, directory or whole filesystem).
- Hide processes easily with a kernel option.
- Freeze mode (no RSBAC setting can be changed until reboot).
- Softmode (RSBAC running in non-enforcing mode, can be disabled per single boot).
- X11 Support.
- Inherited attributes (easy administration).
- Fast, low overhead solution.
- TTL, define certain accesses at certain dates/time only.
- Highly portable.
Website: www.rsbac.org
Support: Documentation
Developer: Amon Ott, kang, Michal
License: GNU General Public License v2.0
| Popular series | |
|---|---|
 | The largest compilation of the best free and open source software in the universe. Each article is supplied with a legendary ratings chart helping you to make informed decisions. |
 | Hundreds of in-depth reviews offering our unbiased and expert opinion on software. We offer helpful and impartial information. |
 | The Big List of Active Linux Distros is a large compilation of actively developed Linux distributions. |
 | Replace proprietary software with open source alternatives: Google, Microsoft, Apple, Adobe, IBM, Autodesk, Oracle, Atlassian, Corel, Cisco, Intuit, and SAS. |
 | Awesome Free Linux Games Tools showcases a series of tools that making gaming on Linux a more pleasurable experience. This is a new series. |
 | Machine Learning explores practical applications of machine learning and deep learning from a Linux perspective. We've written reviews of more than 40 self-hosted apps. All are free and open source. |
 | New to Linux? Read our Linux for Starters series. We start right at the basics and teach you everything you need to know to get started with Linux. |
 | Alternatives to popular CLI tools showcases essential tools that are modern replacements for core Linux utilities. |
 | Essential Linux system tools focuses on small, indispensable utilities, useful for system administrators as well as regular users. |
 | Linux utilities to maximise your productivity. Small, indispensable tools, useful for anyone running a Linux machine. |
 | Surveys popular streaming services from a Linux perspective: Amazon Music Unlimited, Myuzi, Spotify, Deezer, Tidal. |
 | Saving Money with Linux looks at how you can reduce your energy bills running Linux. |
 | Home computers became commonplace in the 1980s. Emulate home computers including the Commodore 64, Amiga, Atari ST, ZX81, Amstrad CPC, and ZX Spectrum. |
 | Now and Then examines how promising open source software fared over the years. It can be a bumpy ride. |
 | Linux at Home looks at a range of home activities where Linux can play its part, making the most of our time at home, keeping active and engaged. |
 | Linux Candy reveals the lighter side of Linux. Have some fun and escape from the daily drudgery. |
 | Getting Started with Docker helps you master Docker, a set of platform as a service products that delivers software in packages called containers. |
 | Best Free Android Apps. We showcase free Android apps that are definitely worth downloading. There's a strict eligibility criteria for inclusion in this series. |
 | These best free books accelerate your learning of every programming language. Learn a new language today! |
 | These free tutorials offer the perfect tonic to our free programming books series. |
 | Linux Around The World showcases usergroups that are relevant to Linux enthusiasts. Great ways to meet up with fellow enthusiasts. |
 | Stars and Stripes is an occasional series looking at the impact of Linux in the USA. |