fapolicyd - File Access Policy Daemon

Fapolicyd is no longer being distributed from this page. Get the latest release directly from github. The historical releases will still be here for the time being. The last one distributed from this page was released on Apr 29, 2024
fapolicyd-1.3.3.tar.gz
fapolicyd-1.3.2.tar.gz

 
This is the project page and source code distribution location for the fapolicyd application whitelisting daemon. Application whitelisting is a system integrity technique whereby applications that are known by some reputation source are permitted to execute or open certain files. Applications that unknown by the reputation source are not allowed to execute. Currently, reputation sources could be the rpm databases or an admin defined trusted files.

The default policy is designed with a couple goals in mind:

• No bypass of security by executing programs via ld.so.
• Anything requesting execution must be trusted.
• Any library or interpretted language application or module must be trusted.

Source code on Github