Umbrella-0.5.1 stable released

Umbrella-0.5.1 stable released

[Kristian Sørensen]

Hi all!

We are pleased to inform you that Umbrella 0.5.1 is now released. This is a 
very stable release, which has been tested on our workstations for 6+ days 
continously.

Get the release here: 
http://prdownloads.sourceforge.net/umbrella/umbrella-0.5.1.tar.bz2?download

The strategy of the further development of Umbrella is to have
* STABLE and well tested Umbrella as patches 
* UNSTABLE bleeding edge technology in the CVS module umbrella-devel


We have lots of new stuff and optimizations in the CVS, which slowley will be 
applied and tested before getting realeased as patches. Currently we have 
these in the CVS:
* New, small and efficient bit vector
* New datastructure for storing restrictions
   See this thread for details: 
   http://sourceforge.net/mailarchive/forum.php?thread_id=5886152&forum_id=42079
* Restrictions on process signaling
* Authentication of binaries (still under development for the 0.6 release)


Best regards,
Kristian Sørensen.


-- 
Kristian Sørensen
- The Umbrella Project  --  Security for Consumer Electronics
    http://umbrella.sourceforge.net

E-mail: ipqw@users.sf.net, Phone: +45 29723816

Re: Umbrella-0.5.1 stable released

[Jens Axboe]

On Tue, Nov 23 2004, Kristian Sørensen wrote:
> Hi all!
> 
> We are pleased to inform you that Umbrella 0.5.1 is now released. This is a 
> very stable release, which has been tested on our workstations for 6+ days 
> continously.
> 
> Get the release here: 
> http://prdownloads.sourceforge.net/umbrella/umbrella-0.5.1.tar.bz2?download
> 
> The strategy of the further development of Umbrella is to have
> * STABLE and well tested Umbrella as patches 
> * UNSTABLE bleeding edge technology in the CVS module umbrella-devel
> 
> 
> We have lots of new stuff and optimizations in the CVS, which slowley will be 
> applied and tested before getting realeased as patches. Currently we have 
> these in the CVS:
> * New, small and efficient bit vector
> * New datastructure for storing restrictions
>    See this thread for details: 
>    http://sourceforge.net/mailarchive/forum.php?thread_id=5886152&forum_id=42079
> * Restrictions on process signaling
> * Authentication of binaries (still under development for the 0.6 release)

And umbrella is?

-- 
Jens Axboe

Re: Umbrella-0.5.1 stable released

[Simon Burke]

On Tue, 23 Nov 2004 15:48:13 +0100, Jens Axboe <axboe@suse.de> wrote:
> On Tue, Nov 23 2004, Kristian Sørensen wrote:
> > Hi all!
> >
> > We are pleased to inform you that Umbrella 0.5.1 is now released. This is a
> > very stable release, which has been tested on our workstations for 6+ days
> > continously.
> >
> > Get the release here:
> > http://prdownloads.sourceforge.net/umbrella/umbrella-0.5.1.tar.bz2?download
> >
> > The strategy of the further development of Umbrella is to have
> > * STABLE and well tested Umbrella as patches
> > * UNSTABLE bleeding edge technology in the CVS module umbrella-devel
> >
> >
> > We have lots of new stuff and optimizations in the CVS, which slowley will be
> > applied and tested before getting realeased as patches. Currently we have
> > these in the CVS:
> > * New, small and efficient bit vector
> > * New datastructure for storing restrictions
> >    See this thread for details:
> >    http://sourceforge.net/mailarchive/forum.php?thread_id=5886152&forum_id=42079
> > * Restrictions on process signaling
> > * Authentication of binaries (still under development for the 0.6 release)
> 
> And umbrella is?
> 
Umbrella for handhelds implements a combination of process based
mandatory access control (MAC) and authentication of files for Linux
on top of the Linux Security Modules framework. The MAC scheme is
enforced by a set of restrictions for each process.

*apparently*  (i just copied out the sourceforge description).

-- 
Theres no place like ::1

Thanks,
SimonB

Re: Umbrella-0.5.1 stable released

[Kristian Sørensen]

On Tuesday 23 November 2004 15:48, Jens Axboe wrote:
> On Tue, Nov 23 2004, Kristian Sørensen wrote:
> > Hi all!
> >
> > We are pleased to inform you that Umbrella 0.5.1 is now released. This is
> > a very stable release, which has been tested on our workstations for 6+
> > days continously.
> >
> > Get the release here:
> > http://prdownloads.sourceforge.net/umbrella/umbrella-0.5.1.tar.bz2?downlo
> >ad
> >
> > The strategy of the further development of Umbrella is to have
> > * STABLE and well tested Umbrella as patches
> > * UNSTABLE bleeding edge technology in the CVS module umbrella-devel
> >
> >
> > We have lots of new stuff and optimizations in the CVS, which slowley
> > will be applied and tested before getting realeased as patches. Currently
> > we have these in the CVS:
> > * New, small and efficient bit vector
> > * New datastructure for storing restrictions
> >    See this thread for details:
> >   
> > http://sourceforge.net/mailarchive/forum.php?thread_id=5886152&forum_id=4
> >2079 * Restrictions on process signaling
> > * Authentication of binaries (still under development for the 0.6
> > release)
>
> And umbrella is?
Undskyld - vi plejer at tilføje en beskrivelse... her kommer den:

Umbrella is a security mechanism which implements a combination of 
process-based Mandatory Access Control (MAC) and authentication of files 
through Digital Signed Binaries (DSB) for Linux based consumer electronics 
devices ranging from mobile phones to settop boxes.

Umbrella is implemented on top of the Linux Security Modules (LSM) framework. 
The MAC scheme is enforced by a set of restrictions on each process. This 
policy is distributed with a binary in form of execute restrictions (in the 
file signature) and within the program, where the developer has the 
opportunity of making a "restricted fork" for setting restrictions for new 
children.

-- 
Kristian Sørensen
- The Umbrella Project  --  Security for Consumer Electronics
    http://umbrella.sourceforge.net

E-mail: ipqw@users.sf.net, Phone: +45 29723816

Re: Umbrella-0.5.1 stable released

[Jens Axboe]

On Tue, Nov 23 2004, Kristian Sørensen wrote:
> On Tuesday 23 November 2004 15:48, Jens Axboe wrote:
> > On Tue, Nov 23 2004, Kristian Sørensen wrote:
> > > Hi all!
> > >
> > > We are pleased to inform you that Umbrella 0.5.1 is now released. This is
> > > a very stable release, which has been tested on our workstations for 6+
> > > days continously.
> > >
> > > Get the release here:
> > > http://prdownloads.sourceforge.net/umbrella/umbrella-0.5.1.tar.bz2?downlo
> > >ad
> > >
> > > The strategy of the further development of Umbrella is to have
> > > * STABLE and well tested Umbrella as patches
> > > * UNSTABLE bleeding edge technology in the CVS module umbrella-devel
> > >
> > >
> > > We have lots of new stuff and optimizations in the CVS, which slowley
> > > will be applied and tested before getting realeased as patches. Currently
> > > we have these in the CVS:
> > > * New, small and efficient bit vector
> > > * New datastructure for storing restrictions
> > >    See this thread for details:
> > >   
> > > http://sourceforge.net/mailarchive/forum.php?thread_id=5886152&forum_id=4
> > >2079 * Restrictions on process signaling
> > > * Authentication of binaries (still under development for the 0.6
> > > release)
> >
> > And umbrella is?
> Undskyld - vi plejer at tilføje en beskrivelse... her kommer den:
> 
> Umbrella is a security mechanism which implements a combination of
> process-based Mandatory Access Control (MAC) and authentication of
> files through Digital Signed Binaries (DSB) for Linux based consumer
> electronics devices ranging from mobile phones to settop boxes.
> 
> Umbrella is implemented on top of the Linux Security Modules (LSM)
> framework.  The MAC scheme is enforced by a set of restrictions on
> each process. This policy is distributed with a binary in form of
> execute restrictions (in the file signature) and within the program,
> where the developer has the opportunity of making a "restricted fork"
> for setting restrictions for new children.

Thanks! Sometimes being lazy does pay off.

-- 
Jens Axboe