Information:

Community:

Latest

9/20/00 Still Alive

Yes, we're still here and working on the project. The BSM is undergoing a ground-up rewrite that should solve all of the outstanding architectural issues. I already have it auditing a small subset of events and getting that data out of the kernel and interpreted sucessfully. More information soon.

Jeremy

P.S. I pulled the old versions since there really wasn't any point to experimenting with them.

About the Project

The Linux Basic Security Module (Linux BSM) is an initiative of the University of California at Davis to provide a comprehesive auditing package for Linux that is fully compliant with the U.S. Government's C2 standards for security, defined in the standards document "Trusted Computer System Evaluation Criteria, DOD standard 5200.28-STD, December, 1985" or more commonly called (due to it's cover) the Orange Book.

Linux BSM is a daemon and set of kernel patches that aim to clone the configuration files, interfaces, and output of Sun's Solaris Basic Security Module. Linux BSM monitors and records system events on the kernel level, allowing the system adminstrator to keep a watchful eye on the activities of the system.

The project is currently being maintained by Daniel Holmlund holmlund@cs.ucdavis.edu and Jeremy Banford banford@cs.ucdavis.edu. This site is hosted at SourceForge.net, a free hosting service for Open Source software development. Thanks to VA Linux for providing resources to build the community.
If Sourceforge should ever be down there is a U.C. Davis mirror at soledad.cs.ucdavis.edu.

Download:

Copyright

The Linux BSM is copyright © 2000 Daniel Holmlund and Jeremy Banford, and is made available under the terms of the GNU GPL license. The accompanying documentation (including this web site) is also copyright © 2000 Daniel Holmlund and Jeremy Banford, and are made available under the terms of the GNU Free Documentation License.

Last modified 9/20/00 banford@cs.ucdavis.edu