Perforce: //depot/projects/trustedbsd/sebsd/... Collection: p4-cvs-trustedbsd-sebsd
SEBSD is a port of NSA's FLASK/TE implementation in SELinux to run on FreeBSD as a plug-in module to the TrustedBSD MAC Framework, as well as the policy files and necessary adaptations of FreeBSD's userland applications. At the time of this writing, the SEBSD module can be attached to the kernel and run in enforcing mode using a sample policy; many but not all relevant userland applications have been updated to properly interact with FLASK security contexts, including the login program. The FLASK implementation provides access to Type Enforcement (TE), as well as RBAC and a second MLS policy implementation.
McAfee Research, now SPARTA ISSO, provides an ISO snapshot and CVSUP source distribution of SEBSD maintained on the FreeBSD Project Perforce Server.
The FLASK/TE implementation provided by NSA, SCC, and SPARTA ISSO (McAfee Research), is licensed under the GNU Public License (GPL), and will be distributed seperately from the remainder of the TrustedBSD components due to these licensing constraints. However, these components are available as source code module that plugs into the MAC Framework.
2005-06-24 6.0-SEBSD snapshot ISO: Download. Install notes. This SEBSD snapshot is based on a late-2004 snapshot of FreeBSD 6.x, combined with SELinux sources from that time. An updated SEBSD snapshot to coincide with FreeBSD 6.0-RELEASE will be available in the near future.
2004-01-08 5.1-SEBSD snapshot ISO: Download. Install notes.
In addition, a port of the SEBSD module (along with MAC Framework) to Apple's Darwin operating system is also underway; see the SEDarwin page for more information.
McAfee Research anticipates a public test release of the SEBSD implementation during the month of December, 2003. This implementation will be distributed as a complete FreeBSD snapshot against FreeBSD 5.1-CURRENT, as it includes a number of modifications to the userland environment. Early access to the SEBSD development branch is available via the FreeBSD Project cvsup and perforce servers.
d74 1 a74 1 Network Associates Laboratories, is licensed under the GNU d81 8 @ 1.4 log @Hook up the 2004/01/08 SEBSD-5.1 snapshot (not committed to CVS happily). @ text @d39 1 a39 1 $FreeBSD: projects/trustedbsd/www/sebsd.page,v 1.3 2003/12/07 23:41:53 rwatson Exp $ d49 2 @ 1.3 log @Break out the page on the TrustedBSD MAC Framework into a seperate web page from the Components page, and reference it appopriately. Attempt to consistently refer to it with "TrustedBSD" in front. @ text @d39 1 a39 1 $FreeBSD: projects/trustedbsd/www/sebsd.page,v 1.2 2003/12/07 23:30:35 rwatson Exp $ d81 5 @ 1.2 log @Reference SEDarwin from the SEBSD page. Add SEDarwin to the sidebar. @ text @d39 1 a39 1 $FreeBSD: projects/trustedbsd/www/sebsd.page,v 1.1 2003/09/22 16:06:51 rwatson Exp $ d54 4 a57 3 SELinux to run on FreeBSD as a plug-in module to the MAC Framework, as well as the policy files and necessary adaptations of FreeBSD's userland applications. @ 1.1 log @Break the SEBSD description out onto its own page, since we'll be posting a fair amount more information there over the next few weeks. Improve the description of the status of the SEBSD MAC module work, as well as document that we (NAI Labs) intend to do a snapshot release of the SEBSD work in October, 2003. Update the sidebar to take these changes into account. @ text @d5 4 a8 4 This documentation was developed for the FreeBSD Project by Network Associates Laboratories, the Security Research Division of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the DARPA CHATS research program. d39 1 a39 1 $FreeBSD$ d65 2 a66 3Network Associates Laboratories anticipates a public test release of the SEBSD implementation during the month of October, 2003. d80 5 @