TrustedBSD
Added 31 Jul 2008
he
TrustedBSD project combines the core FreeBSD release with trusted
security components that conform to the Common Criteria for Information
Technology Security Evaluation. These components provide a range of
different security constructs vital to ensuring the secure operation of
the operating system.
The tools include, but are certainly not limited to, centralized policy management, extensive auditing of components and execution (including kernel modules and function calls), mandatory access control for different areas of the system, and access control lists from the file system and kernel resources. Together, they provide a finer level of access control, better reporting and monitoring, and, overall, a more secure environment for running services.
The ultimate aim is to roll back the content of TrustedBSD into the main FreeBSD releases. Until then, consider them very separate projects, with the TrustedBSD project page containing downloads and documentation on the TrustedBSD implementation.