
	Where results make sense

Topic: TrustedBSD

Related Topics

Security focused operating system

FreeBSD

FreeBSD and Linux

Operating system

Immunix

Pax

NetBSD

Comparison of operating systems

Tom Greenhalgh

Doom 3

Comparison of Linux distributions

Imputation

Burley

Theuderic I

DBpowerAMP

In the News (Sat 5 Dec 09)

Northern Trust

Marvin Harrison

Peter Chernin

Gary Locke

Match Play

Penelope Cruz

Mickey Rourke

AR Rahman

Danny Boyle

Hugh Jackman

	TrustedBSD - Wikipedia, the free encyclopedia
		The TrustedBSD project provides a set of trusted operating system extensions to the FreeBSD operating system, begun primarily by Robert Watson, the goal of the project has been implementing concepts from the Common Criteria for Information Technology Security Evaluation, the Orange Book.
		As part of the TrustedBSD project, there is also a port of the NSA's FLASK/TE implementation in SELinux to run on FreeBSD.
		While most components of the TrustedBSD project are eventually folded into the main sources for FreeBSD, this is not their only destination.
	en.wikipedia.org /wiki/TrustedBSD (226 words)

	SELinux Mailing List: by thread (Site not responding. Last check: 2007-09-05)
		TrustedBSD is developing a variety of trusted operating system features for FreeBSD, including mandatory access controls, while SELinux has specifically focused on developing flexible mandatory access controls for Linux.
		The TrustedBSD mandatory access controls are currently limited to hardcoded policies such as multi-level security and Biba integrity, but they plan on migrating to a more flexible MAC architecture in the future.
		The TrustedBSD project has the ability to directly commit their features (as they mature) into the FreeBSD kernel, since their lead developer is also a FreeBSD core team member, whereas we lack such a direct path into the Linux kernel.
	www.nsa.gov /SELinux/list-archive/0107/thread_body19.cfm (302 words)

	FreeBSD - Wikipedia, the free encyclopedia
		The TrustedBSD project was formed by Robert Watson for the express purpose of adding trusted operating system functionality to the FreeBSD operating system.
		An extensible mandatory access control framework (the TrustedBSD MAC Framework), filesystem Access Control Lists (ACLs) and the new UFS2 filesystem all came from TrustedBSD.
		TrustedBSD is a set of trusted operating system extensions for FreeBSD, including support for mandatory access control, event auditing via OpenBSM, access control lists, and a variety of other security features.
	en.wikipedia.org /wiki/FreeBSD (2064 words)

	The TrustedBSD MAC Framework: Extensible Kernel Access Control for FreeBSD 5.0
		The TrustedBSD MAC Framework, integrated into FreeBSD 5.0, provides a flexible framework for kernel access control extension, permitting extensions to be introduced more easily, and avoiding the need for direct modification of distributed kernel sources.
		The TrustedBSD Project, in seeking to provide access to trusted operating system features, provides several MAC policies for use with FreeBSD; the challenges associated with this work include introducing the services securely, and without substantially impacting the performance and reliability of FreeBSD installations not taking advantage of these new features.
		The TrustedBSD MAC Framework is available under a two-clause BSD license, making it appropriate for open and closed-source, research, educational or commercial use without restriction.
	www.usenix.org /publications/library/proceedings/usenix03/tech/freenix03/full_papers/watson/watson_html (5562 words)

	Daemon News '200110' : '"The TrustedBSD Project "'
		The TrustedBSD project was started in order to develop a set of trusted operating system security extensions to the FreeBSD operating system.
		The TrustedBSD Project will provide extensive user and developer documentation, so that the TrustedBSD extensions can be used to their fullest, allowing fine-tuned security mechanisms to be more readily available for both programmers and administrators.
		The TrustedBSD Project has received support in a variety of forms, including funding, communications (phone costs, bandwidth), hardware, and travel accomodations.
	ezine.daemonnews.org /200110/trustedbsd.html (663 words)

	Wikipedia: FreeBSD
		FreeBSD 5 includes a number of new features, including many that are security related.
		The TrustedBSD project was formed for the express purpose of adding trusted operating system functionality to the FreeBSD operating system.
		A derivative version based on the GNU toolset is currently being developed by Debian as Debian GNU/FreeBSD.
	www.factbook.org /wikipedia/en/f/fr/freebsd.html (398 words)

	Computer Science 432
		The TrustedBSD project implemented an extended attribute to support their research into trusted operating systems, which has been merged into the FreeBSD 5.0-CURRENT development branch.
		The TrustedBSD developers chose to back extended attributes to a per-filesystem, per-attribute backing file to quickly deploy the service with minimal changes to existing installations.
		We modified the TrustedBSD implementation's functions to store attributes the way we wanted, so when we want to compile a kernel with our code we simply ifdef out the contents of ufs_extattr.c and include ephs_extattr.c.
	www.cs.williams.edu /~terescoj/432projf01 (889 words)

	TrustedBSD - TheBestLinks.com - Computer security, FreeBSD, NSA, Operating system, ...
		TrustedBSD - TheBestLinks.com - Computer security, FreeBSD, NSA, Operating system,...
		TrustedBSD, Computer security, FreeBSD, NSA, Operating system, Security...
		The TrustedBSD project was started primarily by Robert Watson, an active FreeBSD committer.
	www.thebestlinks.com /TrustedBSD.html (203 words)

	November 2001 Status Report (Site not responding. Last check: 2007-09-05)
		During these months, substantial work was performed to improve system performance and stability, in particular addressing concerns regarding regressions in network performance for the TCP protocol, and via the introduction of polled network device driver support.
		Administrative changes are also documented, including work to redefine and formalize the release engineering process, and the approval of a new portmgr group which will administer the ports collection.
		Development of TrustedBSD source code was moved to the FreeBSD Perforce repository, permitting better source code management.
	cnsnap.cn.freebsd.org /news/status/report-november-2001.html (2288 words)

	October-December 2003 Status Report
		TrustedBSD "Security-Enhanced BSD" (SEBSD) is a port of NSA's SELinux FLASK security architecture, Type Enforcement (TE) policy engine and language, and sample policy to FreeBSD using the TrustedBSD MAC Framework.
		The TrustedBSD Project is producing an implementation of CAPP compliant Audit support for use with FreeBSD.
		The TrustedBSD Mandatory Access Control (MAC) Framework permits the FreeBSD kernel and userspace access control policies to be adapted at compile-time, boot-time, or run-time.
	www.freebsd.org /news/status/report-oct-2003-dec-2003.html (4792 words)

	TrustedBSD - SEDarwin (Site not responding. Last check: 2007-09-05)
		SEDarwin is a port of the TrustedBSD MAC Framework access controle extension framework to Apple's Darwin operating system platform, along with ports of a number of policy modules including mac_biba, mac_mls, and the SEBSD policy.
		SEDarwin is highly experimental, but current sufficiently functional to allow the enforcement of mandatory process and file protections under Mac OS 10.3.8 and Darwin 7.3 on a variety of Apple PowerPC hardware.
		DSEP is primarily concerned with updating and maintaining the TrustedBSD MAC Framework on Darwin.
	www.trustedbsd.org /sedarwin.html (206 words)

	TrustedBSD - Home
		This will allow the compile-time, boot-time, and run-time extension of the operating system security model based in both TrustedBSD access control modules, and third-party modules that employ the extension framework.
		The TrustedBSD Project is made possible through the generous sponsorship and support from a variety of organizations, including the Defence Advanced Research Projects Agency (DARPA), the National Security Agency (NSA), Network Associates Laboratories, Safeport Network Services, the University of Pennsylvania, Yahoo!, McAfee Research, SPARTA, Inc., Apple Computer, Inc., and others.
		Contributions to support the TrustedBSD Project are welcome; please consider making donations through the FreeBSD Foundation.
	www.trustedbsd.org (350 words)

	trustedbsd (Site not responding. Last check: 2007-09-05)
		Depending on the hardware platform Nitix is deployed on, Nitix allows you to recover from a system failure in just 2 minutes with a unique technology, found only with Nitix, called SystemER (Emergency Recovery).
		trustedbsd, A mutual agreement with another organization to share data center facilities in the event of a disaster
		trustedbsd, Smart SMB decision makers are developing comprehensive plans that detail how they can recover from the loss of their complete computing infrastructure, said ITSPA chairman Andrew Levi, CEO of Aztec Systems in Carrollton, Texas.
	www.tpaix.com /disaster_recovery/trustedbsd.html (500 words)

	FreeBSD: TrustedBSD Status Report
		Robert Watson has posted a number of status updates relating to various pieces of work going on in the TrustedBSD Project, and in particular, relating to integration of recent changes into the FreeBSD CVS tree for inclusion in the upcoming 6.0 release.
		Large amounts of work are being done on the TrustedBSD Audit implementation, and the OpenBSM user libraries, documentation, and open source BSM audit tools area almost ready for their first release.
		TrustedBSD MAC development branch on the FreeBSD perforce server, as
	kerneltrap.org /node/5206 (827 words)

	SPARTA ISSO
		Work performed at SPARTA ISSO on TrustedBSD occurs as part of the CBOSS Project, which is sponsored by DARPA.
		Additional information on the TrustedBSD Project may be found on the TrustedBSD web site, including information on other sponsors and on-going projects.
		A variety of TrustedBSD components have (and are) being developed at SPARTA ISSO, or in collaboration with SPARTA ISSO sub-contractors.
	isso.sparta.com /opensource/trustedbsd (496 words)

	Interview With Robert Watson \| BSDatwork.com - FreeBSD OpenBSD NetBSD Unix News And Configuration Information (Site not responding. Last check: 2007-09-05)
		Robert Watson is a member of the FreeBSD Project's core and security-officer teams, and founder of the TrustedBSD Project.
		For his day job, he is a Research Scientist in the network security research group at NAI Labs, studying operating and network security issues.
		DARPA is now funding a FreeBSD security research and development project at NAI Labs, and they also sub-contract to a number of independent developers in the FreeBSD community to complete that work.
	www.bsdatwork.com /2002/01/30/robert_watson_interview (133 words)

	[ACL-Devel] www.TrustedBSD.org (Site not responding. Last check: 2007-09-05)
		TrustedBSD and SGI's OB1 make a interesting base to work from.
		But i fear not many people can see the benefit of this and many will object in its inclusion in the standard kernel.
		That's the big problem i see for the TrustedBSD folks too.
	acl.bestbits.at /pipermail/acl-devel/2000-April/000227.html (144 words)

	SPARTA ISSO
		The primary goal of CBOSS is to improve the security of Open Source software, with a focus on the FreeBSD operating system.
		CBOSS takes advantage of existing infrastructure provided by the TrustedBSD Project, and enhances those technologies to improve flexibility, extensibility, performance, and assurance.
		Documentation for the TrustedBSD MAC Framework may be found in the FreeBSD Developer's Handbook.
	isso.sparta.com /opensource/initiatives/cboss (505 words)

	Introduction
		The TrustedBSD MAC framework provides a mechanism to allow the compile-time or run-time extension of the kernel access control model.
		New system policies may be implemented as kernel modules and linked to the kernel; if multiple policy modules are present, their results will be composed.
		This document describes the rough architecture of the framework, with the understanding that this is a work-in-progress and may change subtantially as requirements evolve.
	jamesthornton.com /freebsd/books/developers-handbook/mac-introduction.html (160 words)

	Paper Presentation Schedule \| STOS Symposium 2003 (Site not responding. Last check: 2007-09-05)
		The TrustedBSD MAC Framework, presented previously at STOS workshops, permits the compile-time and run-time extension of the FreeBSD operating system access control policy using pluggable policy modules.
		The TrustedBSD MAC Framework, the access control extension technology developed by Network Associates Laboratories for the TrustedBSD Project, permits compile-time and run-time extension of the access control policy of the FreeBSD operating system, and includes sample modules implementing Biba integrity, MLS confidentiality, and the SELinux FLASK/TE model.
		Network Associates Laboratories is performing an experimental port of the MAC Framework, including sample policy modules such as the Biba, MLS, and SEBSD policy modules, to the Darwin operating system.
	www.stosdarwin.org /dc03/Papers.html (2623 words)

	[No title] (Site not responding. Last check: 2007-09-05)
		One of the biggest differences between TrustedBSD and SELinux.
		From 2000 to 2003 CERT incident reports increased at an annual rate of almost 85%.
		One of the bigger differences between TrustedBSD and SELinux.
	www.list.gmu.edu /zhang/isa767/projects/clambert.ppt (1099 words)

	MAC Framework Kernel Architecture (Site not responding. Last check: 2007-09-05)
		The TrustedBSD MAC Framework permits kernel modules to extend the operating system security policy, as well as providing infrastructure functionality required by many access control modules.
		If multiple policies are simultaneously loaded, the MAC Framework will usefully (for some definition of useful) compose the results of the policies.
		The TrustedBSD MAC Framework may be directly managed using sysctls, loader tunables, and system calls.
	www.svbug.com /documentation/books/arch-handbook/mac-framework-kernel-arch.html (1227 words)

	Off Topic: Fwd: (fwd) Announcement: TrustedBSD Extensions Project
		Off Topic: Fwd: (fwd) Announcement: TrustedBSD Extensions Project
		TrustedBSD consists >of a set of kernel and user-land extensions targeting the Orange Book B1 >evaluation criteria.
		Development is currently underway, and most of the >code is destined to go back into the base FreeBSD operating system; >however, as some components are both extensive and intrusive, the >TrustedBSD project provides a forum for discussion, design, and >development in the interim.
	www.eros-os.org /pipermail/eros-port/2000-April/000554.html (290 words)

	March-April 2004 Status Report
		We are still looking for manpower on SGML'ifying the FAQ translation which has been done last year by several volunteers.
		The TrustedBSD Project is producing an implementation of CAPP compliant Audit support for use with FreeBSD based on the Apple Darwin implementation.
		The TrustedBSD MAC development branch in Perforce was integrated to the most recent 5-CURRENT.
	cvsup.ru.freebsd.org /news/status/report-mar-2004-apr-2004.html (3713 words)

	Sys Admin > Trusted BSD
		TrustedBSD provides a set of trusted operating system extensions to FreeBSD.
		Essentially, the MAC framework allows the systems administrator to give fine-grained privileges to each user through modifying the existing security policy to match the needs of the given system.
		TrustedBSD comes prepackaged with a few MAC security modules, which augment the security policies of the given system or add new features — Biba Integrity Policy and File System Firewall Policy, among others.
	www.samag.com /documents/sam0307web/sam0307web.html (631 words)

Try your search on: Qwika (all wikis)