The RSBAC cookbook

Amon Ott

Stanislav Ievlev

Heinrich W. Klöpping

Audience: This book is intended for use by experienced and skilled Unix professionals that wish to install, configure and use RSBAC.

Approach: This book resulted from a project founded on June 28th, 2002 by Amon Ott, Stanislav Ievlev and Henk Klöpping. We aimed at providing a cookbook -- a book filled with hands-on instructions and examples of the installation, configuration and use of Rule Set Based Access control (RSBAC). This book will be accompanied by four other books: The RSBAC reference manual, The RSBAC programmers cookbook, The RSBAC programmers reference manual and The RSBAC introduction.

To learn where the latest version of this book can be downloaded or read please refer to Section 6.2 in The RSBAC introduction.

Sources: Our sources of information were (Open Source) material on the Internet, several books, practical experience of the authors and others and research and programming work done by the authors. We try to give credit where due, but are fallible. We apologize.

While every precaution was made in the preparation of this book, we can assume no responsibility for errors or omissions. When you feel we have not given you proper credit or feel we may have violated your rights or when you have suggestions how we may improve our work please notify us immediately so we can take corrective actions.

Organization of this book: This book has been organised in four parts:

context and background information
theory of RSBAC (including security models)
obtaining and installing RSBAC
administering RSBAC

This book was written using the DocBook V3.1/SGML documentation standard.

Copyright © 2003 Amon Ott, Stanislav Ievlev, Henk Klöpping. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.1 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover Texts, and with no Back-Cover Texts. A copy of the license is included in the section entitled "GNU Free Documentation License".

Dedication

And I said, "You can stop if you want with the Z
Because most people stop with the Z - but not me!
In the places that I go there are things that I see
That I never could spell if I stopped with the Z.
I'm telling you this because you're one of my friends
My alphabet starts where your alphabet ends!

You'll be sort of surprised what there is to be found
Once you go beyond Z and start poking around"

--Dr Seuss On Beyond Zebra