lkml.org 
[lkml]   [2004]   [Nov]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Umbrella-0.5.1 stable released
On Tue, Nov 23 2004, Kristian Sørensen wrote:
> On Tuesday 23 November 2004 15:48, Jens Axboe wrote:
> > On Tue, Nov 23 2004, Kristian Sørensen wrote:
> > > Hi all!
> > >
> > > We are pleased to inform you that Umbrella 0.5.1 is now released. This is
> > > a very stable release, which has been tested on our workstations for 6+
> > > days continously.
> > >
> > > Get the release here:
> > > http://prdownloads.sourceforge.net/umbrella/umbrella-0.5.1.tar.bz2?downlo
> > >ad
> > >
> > > The strategy of the further development of Umbrella is to have
> > > * STABLE and well tested Umbrella as patches
> > > * UNSTABLE bleeding edge technology in the CVS module umbrella-devel
> > >
> > >
> > > We have lots of new stuff and optimizations in the CVS, which slowley
> > > will be applied and tested before getting realeased as patches. Currently
> > > we have these in the CVS:
> > > * New, small and efficient bit vector
> > > * New datastructure for storing restrictions
> > > See this thread for details:
> > >
> > > http://sourceforge.net/mailarchive/forum.php?thread_id=5886152&forum_id=4
> > >2079 * Restrictions on process signaling
> > > * Authentication of binaries (still under development for the 0.6
> > > release)
> >
> > And umbrella is?
> Undskyld - vi plejer at tilføje en beskrivelse... her kommer den:
>
> Umbrella is a security mechanism which implements a combination of
> process-based Mandatory Access Control (MAC) and authentication of
> files through Digital Signed Binaries (DSB) for Linux based consumer
> electronics devices ranging from mobile phones to settop boxes.
>
> Umbrella is implemented on top of the Linux Security Modules (LSM)
> framework. The MAC scheme is enforced by a set of restrictions on
> each process. This policy is distributed with a binary in form of
> execute restrictions (in the file signature) and within the program,
> where the developer has the opportunity of making a "restricted fork"
> for setting restrictions for new children.

Thanks! Sometimes being lazy does pay off.

--
Jens Axboe

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:08    [from the cache]
©2003-2011 Jasper Spaans