Archive for the 'Projects' Category

NetLabel Tools 0.18 Released

by James Morris |  Wednesday, June 25th, 2008

Paul Moore of HP has announced the release of version 0.18 of NetLabel Tools, a suite for managing explict labeled networking (i.e. attaching labels to packets via IP options) under Linux. This release adds support for static and fallback labels in the 2.6.25 kernel, in addition to several bugfixes and enhancements.

Core SELinux version R080611 released

by James Morris |  Wednesday, June 11th, 2008

The NSA have announced the release of updated version of the core SELinux code, available from their web site. This release includes support for permissive domains (allowing permissive mode on a per-domain basis), user and role mapping via sepol, and various minor fixes and enhancements.

OpenSolaris FMAC Alpha 1 Released

by James Morris |  Sunday, May 4th, 2008

OpenSolaris developers have announced the first release (Alpha 1) of source code for the FMAC project. This code drop of the current policy and toolchain infrastructure work allows security policy to be loaded into the operating system but not yet enforced.

SGI CAPP/LSPP EAL4+ Certification Test Suite Released

by James Morris |  Tuesday, April 22nd, 2008

SGI have announced the release of their certification test suite and its incorporation with the Linux Test Project (LTP). The test suite is a component of their EAL4+ CAPP/LSPP certification effort for RHEL 5.1 on Altix hardware, and is based on previous IBM work.

Reference Policy 20080402 Released

by James Morris |  Wednesday, April 2nd, 2008

Tresys have announced the release of the latest version of Reference Policy. A notable highlight in this release is the addition of core infrastructure for X window (XACE/XSELinux). There’s also new support for wireshark, policy refinements for several already supported applications, and general enhancements including 64-bit capability support and updates for labeled networking.

SE-PostgreSQL 8.3-based release

by James Morris |  Tuesday, March 11th, 2008

KaiGai Koehi announced the release of an updated version of SE-PostgreSQL based on version 8.3 of the database. In terms of official packages, this release supports only the upcoming Fedora 9 and current rawhide. RPMs may be downloaded here, or check the project site for other source versions.

Core SELinux version R080305 released

by James Morris |  Thursday, March 6th, 2008

The NSA have announced the latest release of the core userland SELinux code. According to the changelog, changes in this release include support for policy capabilities (i.e. allowing features to be selectively implemented in policy), several enhancements to libselinux, optimized matchpathcon, improved error handling and various bugfixes. The release may be downloaded here. Also noted in the release is a new page on the NSA site: Related Work, providing links to information on the underlying architecture and non-Linux implementations.

Opensolaris launches fine-grained MAC (FMAC) project with TE/Flask security

by James Morris |  Tuesday, March 4th, 2008

The NSA announced the launch of a fine-grained MAC (FMAC) project for OpenSolaris. Similar to SELinux, FMAC is the integration of the Flask/TE security scheme into the OS. For more information, visit the FMAC project page.

Segatex 4.40 Released

by James Morris |  Monday, January 21st, 2008

Shintaro Fujiwara has announced the release of version 4.40 of Segatex, the Qt-based GUI front-end for SELinux. This release improves coverage of the semanage utility.

Reference Policy 20071214 Released

by James Morris |  Friday, December 14th, 2007

Tresys have announced the release of the latest version of SELinux Reference Policy. The main feature of this release is the merging of strict and targeted policy into one. If the unconfined module is present, the policy will behave similar to the old targeted policy, but with the strict policy roles still available. There are also many general fixes and updates, including a Russian translation of the man page, support for exim, and support for Debian syslogd-listfiles.