NSA Logotype

Downloading Security-Enhanced Linux


  Security Enhanced Linux
  Overview
Line Spacer
What's New
Line Spacer
Background
Line Spacer
Documentation
Line Spacer
License
Line Spacer
Download
Line Spacer
Mailing List
Line Spacer
Remaining Work
Line Spacer
Contributors
Line Spacer
About NSA
Line Spacer
Employment Opportunities
Line Spacer
NSA Home Page
 

Security-enhanced Linux includes patches to the Linux 2.2.12 kernel and a number of standard tools and utilities (mostly from RedHat 6.1). It also includes a number of new utilities and documentation. An untested patch for the 2.2.17 kernel is also available separately. By far the easiest way to build and install Security-enhanced Linux currently is to duplicate our source tree (slinux) and follow the instructions in slinux/doc/INSTALL. We have provided a compressed archive of our source tree below, as well as several ways to build it by acquiring only our modifications. As time permits, we intend to create or modify the RPM spec files as appropriate and provide SRPM format files.

Before downloading this software, you must accept the warranty exclusion and limitation of liability.

Everything in One Large File (22MB tar gzip)

This includes everything needed to build Security-enhanced Linux. If you get this file, you do not need any of the files below unless you also want the untested patch for kernel version 2.2.17. This archive contains our documentation and utilities and complete source trees for the 2.2.12 kernel and all utilities modified to support Security-enhanced Linux.

Support Files (978KB tar gzip)

This archive consists of the example security policy configuration, a program for changing roles during a login session, a library for using the new system calls, simple programs that demonstrate the new system calls, scripts for building and installing, and the documentation added for Security-enhanced Linux. You will also need to acquire the patched kernel and patched utilities for a complete distribution. The links below will allow you to get each component either as a modified source tree or a patch to the standard source tree. For your convenience, all the patches are available in a single archive below.

All the Patches (420KB tar gzip)

These patches apply to the versions of packages noted in the specific patch list below. The unpatched source is not currently available from this site. The kernel patch files were generated from the linux-2.2.12 and the linux-2.2.17 sources available from www.kernel.org. The utility patch files were generated from the corresponding sources provided with RedHat 6.1, except for the tar-1.12 patch. The tar-1.12 patch was generated from the sources available from www.gnu.org. In order to use the installation instructions in slinux/doc/INSTALL, please ensure that you have placed the patched source for each package into the directories noted for each modified package below.

Modified Packages

Each package has a patchfile available as well as a compressed tar file of the complete modified source tree. If you get the complete source, the patch will have been already applied and you will not need the patchfile.

Kernel-2.2.12

(slinux/kernel)

Kernel-2.2.17 (untested)

(slinux/kernel-2.2.17)

fileutils-4.0

(slinux/utils/fileutils-4.0)

findutils-4.1

(slinux/utils/findutils-4.1)

logrotate-3.3

(slinux/utils/logrotate-3.3)

netkit-rsh-0.10

(slinux/utils/netkit-rsh-0.10)

procps-2.0.4

(slinux/utils/procps-2.0.4)

psmisc

(slinux/utils/psmisc)

pwdb-0.60

(slinux/utils/pwdb-0.60)

sh-utils-2.0

(slinux/utils/sh-utils-2.0)

shadow-19990827

(slinux/utils/shadow-19990827)

stat-1.5

(slinux/utils/stat-1.5)

sysvinit-2.77

(slinux/utils/sysvinit-2.77)

tar-1.12

(slinux/utils/tar-1.12)

util-linux-2.9w

(slinux/utils/util-linux-2.9w)

vixie-cron-3.0.1

(slinux/utils/vixie-cron-3.0.1)

wu-ftpd-2.5.0 (untested)

(slinux/utils/wu-ftpd-2.5.0)


About NSA   Employment Opportunities   INFOSEC   History   Releases
Line Spacer
National Cryptologic Museum   Mathematics & Education   Tech Transfer

 NSA Seal