Messages in this thread | | | Date | Tue, 23 Nov 2004 16:14:35 +0100 | From | Jens Axboe <> | Subject | Re: Umbrella-0.5.1 stable released |
| |
On Tue, Nov 23 2004, Kristian Sørensen wrote: > On Tuesday 23 November 2004 15:48, Jens Axboe wrote: > > On Tue, Nov 23 2004, Kristian Sørensen wrote: > > > Hi all! > > > > > > We are pleased to inform you that Umbrella 0.5.1 is now released. This is > > > a very stable release, which has been tested on our workstations for 6+ > > > days continously. > > > > > > Get the release here: > > > http://prdownloads.sourceforge.net/umbrella/umbrella-0.5.1.tar.bz2?downlo > > >ad > > > > > > The strategy of the further development of Umbrella is to have > > > * STABLE and well tested Umbrella as patches > > > * UNSTABLE bleeding edge technology in the CVS module umbrella-devel > > > > > > > > > We have lots of new stuff and optimizations in the CVS, which slowley > > > will be applied and tested before getting realeased as patches. Currently > > > we have these in the CVS: > > > * New, small and efficient bit vector > > > * New datastructure for storing restrictions > > > See this thread for details: > > > > > > http://sourceforge.net/mailarchive/forum.php?thread_id=5886152&forum_id=4 > > >2079 * Restrictions on process signaling > > > * Authentication of binaries (still under development for the 0.6 > > > release) > > > > And umbrella is? > Undskyld - vi plejer at tilføje en beskrivelse... her kommer den: > > Umbrella is a security mechanism which implements a combination of > process-based Mandatory Access Control (MAC) and authentication of > files through Digital Signed Binaries (DSB) for Linux based consumer > electronics devices ranging from mobile phones to settop boxes. > > Umbrella is implemented on top of the Linux Security Modules (LSM) > framework. The MAC scheme is enforced by a set of restrictions on > each process. This policy is distributed with a binary in form of > execute restrictions (in the file signature) and within the program, > where the developer has the opportunity of making a "restricted fork" > for setting restrictions for new children.
Thanks! Sometimes being lazy does pay off.
-- Jens Axboe
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |