From: "Kristian Sørensen" <ks@cs.aau.dk>
To: linux-kernel@vger.kernel.org
Subject: [ANNOUNCE] Umbrella-0.6 released
Date: Wed, 16 Mar 2005 13:42:07 +0100 [thread overview]
Message-ID: <200503161342.07498.ks@cs.aau.dk> (raw)
Hi all!
---
Umbrella is a security mechanism that implements a combination of
Process-Based Access Control (PBAC) and authentication of binaries through
Digital Signed Binaries (DSB). The scheme is designed for Linux-based
consumer electronic devices ranging from mobile phones to settop boxes.
Umbrella is implemented on top of the Linux Security Modules (LSM) framework.
The PBAC scheme is enforced by a set of restrictions on each process. This
policy is distributed with a binary in form of execute restrictions (attached
in the binary) and within the program, where the developer has the
opportunity of making a "restricted fork" for setting restrictions for new
children.
---
We now present you with a new and cool version of Umbrella, namely
version 0.6. Besides fulfilling the roadmap of integration with GNU Privacy
Guard, the code has also been optimized and undertaken some major changes.
Followin is the main major changes:
- Complete integration with GNU Privacy Guard to authenticate binaries
- Hash tables for storing restrictions is replaced by the new, fast and
simple FSR data structure, that mimics the 'dentry' structs in the
kernel
- The Umbrella system call is eliminated and completely replaced by a
/proc filesystem interface
- The Umbrella code is now completely independent of all architectures
and kernel subversions
For instructions on how to try out the Process-Based Access Control and
Digitally Signed Binaries in Umbrella, please download the complete 0.6
tarball from SourceForge:
http://prdownloads.sourceforge.net/umbrella/umbrella-0.6.tar.bz2?download
Please refer to the README file in the tarball for further instructions.
As always we appreciate any comments, suggestions etc. you may have :-)
Enjoy,
The Umbrella Team.
--
Kristian Sørensen
- The Umbrella Project -- Security for Consumer Electronics
http://umbrella.sourceforge.net
E-mail: ipqw@users.sf.net, Phone: +45 29723816
reply other threads:[~2005-03-16 12:42 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200503161342.07498.ks@cs.aau.dk \
--to=ks@cs.aau.dk \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
Powered by JetHome