The RSBAC team is happy to announce that RSBAC 1.2.7 has just been released for both kernels 2.4.32 and 2.6.16.

This is the latest stable version. There is no special upgrade path if you were using 1.2.6 or 1.2. Simply compile, install the new admin tools and the new kernel.

This is a short release since 1.2.6 that fixes a few remaining issues.

Changes since 1.2.6:

  • Fix rsbac-admin debian Changelog
  • Fix 2.4 pax flags location
  • Fix 1.2.6 patches issues (non-RSBAC code)

Changes since 1.2.5:

  • New kthread notification code
  • rsbac_login behaving now more like pam login
  • GCC-4 compatibility fixes
  • Change FF to allow file READ (but not READ_OPEN) even with execute_only
  • Caches infected scan results on read/open/close instead of rescan
  • xstats now include GROUP targets
  • Debian package fixes

Patches and prepatched kernels are available at this location: