mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
From: "Kristian Sørensen" <ks@cs.aau.dk>
To: linux-kernel@vger.kernel.org
Subject: [ANNOUNCE] Umbrella-0.6 released
Date: Wed, 16 Mar 2005 13:42:07 +0100	[thread overview]
Message-ID: <200503161342.07498.ks@cs.aau.dk> (raw)

Hi all!

---
Umbrella is a security mechanism that implements a combination of 
Process-Based Access Control (PBAC) and authentication of binaries through 
Digital Signed Binaries (DSB). The scheme is designed for Linux-based 
consumer electronic devices ranging from mobile phones to settop boxes.

Umbrella is implemented on top of the Linux Security Modules (LSM) framework. 
The PBAC scheme is enforced by a set of restrictions on each process. This 
policy is distributed with a binary in form of execute restrictions (attached 
in the binary) and within the program, where the developer has the 
opportunity of making a "restricted fork" for setting restrictions for new 
children.
---

We now present you with a new and cool version of Umbrella, namely
version 0.6. Besides fulfilling the roadmap of integration with GNU Privacy
Guard, the code has also been optimized and undertaken some major changes.

Followin is the main major changes:
  - Complete integration with GNU Privacy Guard to authenticate binaries
  - Hash tables for storing restrictions is replaced by the new, fast and
    simple FSR data structure, that mimics the 'dentry' structs in the
    kernel
  - The Umbrella system call is eliminated and completely replaced by a
    /proc filesystem interface
  - The Umbrella code is now completely independent of all architectures
    and kernel subversions

For instructions on how to try out the Process-Based Access Control and
Digitally Signed Binaries in Umbrella, please download the complete 0.6
tarball from SourceForge:
http://prdownloads.sourceforge.net/umbrella/umbrella-0.6.tar.bz2?download

Please refer to the README file in the tarball for further instructions.

As always we appreciate any comments, suggestions etc. you may have :-)


                                        Enjoy,
                                        The Umbrella Team.



-- 
Kristian Sørensen
- The Umbrella Project  --  Security for Consumer Electronics
  http://umbrella.sourceforge.net

E-mail: ipqw@users.sf.net, Phone: +45 29723816

                 reply	other threads:[~2005-03-16 12:42 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200503161342.07498.ks@cs.aau.dk \
    --to=ks@cs.aau.dk \
    --cc=linux-kernel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

Powered by JetHome