RSBAC - Rule Set Based Access Control

Abstract

This document aims to be a tutorial and introduction to RSBAC. It is not a comprehensive guide to securing a Linux deployment. It is a starting point and guide for the first part of that journey.

Contents

• Preparing the ground
  • Introduction
    • What is RSBAC?
    • Why would I want to use it?
    • So what does RSBAC do exactly?
  • Installing the Packages
    • Obtaining an RSBAC patched kernel
    • Installing administration tools
    • Setting passwords
  • Configuring RSBAC kernel options
    • Importing an existing kernel configuration
    • Configuring standard security options
    • Configuring RSBAC options
  • Building and Installing an RSBAC kernel
    • Building the kernel
    • Installing the kernel
    • Reconfiguring GRUB
    • Rebooting
  • Migrating user information to RSBAC
    • Migrating existing users and groups
    • Resetting passwords
    • Replacing existing tools
  • Authentication System Migration
    • Configuring the system for testing
    • Testing the new authentication system
    • Completing the migration
    • Another kernel rebuild
• The AUTH module
  • Introduction to AUTH
    • What exactly does the AUTH module do?
    • Anatomy of an RSBAC error message
    • Fixing sshd and the login prompt
  • Learning more about AUTH
    • DAC controls, and why man should care
• The ACL module
  • Introduction to ACL
    • What exactly does the ACL module do?
  • A simple ACL policy
    • Base protection
    • What about executables?
    • Write access
  • Securing more than files with ACL
    • Groups
    • Limitations of ACL
• The RC module
  • Introduction to RC
    • Reconfiguring the kernel
    • Types, roles and compatibility
    • Know your role
  • The beginnings of an RC policy
    • Base protection
    • What about executables?
    • More to do about executables
    • Don't forget the libraries
  • A step further with RC
    • Stripping root of its power
    • Powerless root