lkml.org 
[lkml]   [2004]   [Nov]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: Umbrella-0.5.1 stable released
    On Tue, Nov 23 2004, Kristian Sørensen wrote:
    > On Tuesday 23 November 2004 15:48, Jens Axboe wrote:
    > > On Tue, Nov 23 2004, Kristian Sørensen wrote:
    > > > Hi all!
    > > >
    > > > We are pleased to inform you that Umbrella 0.5.1 is now released. This is
    > > > a very stable release, which has been tested on our workstations for 6+
    > > > days continously.
    > > >
    > > > Get the release here:
    > > > http://prdownloads.sourceforge.net/umbrella/umbrella-0.5.1.tar.bz2?downlo
    > > >ad
    > > >
    > > > The strategy of the further development of Umbrella is to have
    > > > * STABLE and well tested Umbrella as patches
    > > > * UNSTABLE bleeding edge technology in the CVS module umbrella-devel
    > > >
    > > >
    > > > We have lots of new stuff and optimizations in the CVS, which slowley
    > > > will be applied and tested before getting realeased as patches. Currently
    > > > we have these in the CVS:
    > > > * New, small and efficient bit vector
    > > > * New datastructure for storing restrictions
    > > > See this thread for details:
    > > >
    > > > http://sourceforge.net/mailarchive/forum.php?thread_id=5886152&forum_id=4
    > > >2079 * Restrictions on process signaling
    > > > * Authentication of binaries (still under development for the 0.6
    > > > release)
    > >
    > > And umbrella is?
    > Undskyld - vi plejer at tilføje en beskrivelse... her kommer den:
    >
    > Umbrella is a security mechanism which implements a combination of
    > process-based Mandatory Access Control (MAC) and authentication of
    > files through Digital Signed Binaries (DSB) for Linux based consumer
    > electronics devices ranging from mobile phones to settop boxes.
    >
    > Umbrella is implemented on top of the Linux Security Modules (LSM)
    > framework. The MAC scheme is enforced by a set of restrictions on
    > each process. This policy is distributed with a binary in form of
    > execute restrictions (in the file signature) and within the program,
    > where the developer has the opportunity of making a "restricted fork"
    > for setting restrictions for new children.

    Thanks! Sometimes being lazy does pay off.

    --
    Jens Axboe

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 14:08    [W:0.026 / U:1.144 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site