This site will look much better in a browser that supports web standards, but it is accessible to any browser or Internet device.

SEDarwin Downloads

SEDarwin is still in the development stage but periodic snapshots are made available for interested parties.

Current Snapshot:

2007-01-25 SEDarwin (Darwin 8.8) technology preview: Download tarball

Major changes in this snapshot:

  • The SELinux userland components have been updated to libsepol-1.16.0, checkpolicy-1.34.0, libselinux-1.34.0, libsemanage-1.10.0, and policycoreutils-1.34.1.

  • The FLASK kernel components have been updated from the SELinux kernel branch at kernel.org.

  • The policy has been updated such that it is now possible to boot and login in enforcing mode. Many of the stock Mac OS X applications function, though more policy work remains to be done.

  • The MAC Framework now passes in pathname information in to several more VFS-related entry points.

  • The MAC Framework has been extended to label packets and network interfaces.

  • Several more issues on multi-processor machines have been fixed.

Older Snapshots:

2006-12-04 SEDarwin (Darwin 8.8) technology preview: Download tarball
This release includes locking changes that fix several issues on multi-processor machines.

2006-11-14 SEDarwin (Darwin 8.8) technology preview: Download tarball
This is the first snapshot based on Mac OS 10.4.8. Major changes include a critical fix to the file label getters and setters, overhauled fdesc support, mediation of task_for_pid(2) and better file label support.

2006-10-31 SEDarwin (Darwin 8.7) technology preview: Download tarball
This is the fifth snapshot based on Mac OS 10.4.x (Tiger). This snapshot is based on the latest SELinux user space components from the NSA SELinux web site and matching kernel components from the SELinux kernel development tree. It contains a work-in-progress port of the reference policy which does not yet operate in enforcing mode.

2006-10-12 SEDarwin (Darwin 8.7) technology preview: Download tarball
This is the fourth snapshot based on Mac OS 10.4.x (Tiger). Several additional daemons are now labeled which allows the Login GUI role selector to function. Also includes a host of bug fixes and an implementation of file descriptor labels.

2006-10-04 SEDarwin (Darwin 8.7) technology preview: Download tarball
This is the third snapshot based on Mac OS 10.4.x (Tiger). We have begun to port the SELinux reference policy to SEDarwin but much remains to be done.

2006-09-13 SEDarwin (Darwin 8.7) technology preview: Download tarball
This is the second snapshot based on Mac OS 10.4.x (Tiger). The kernel and userland components are functional but the included policy file has not been updated for Tiger. Future policy work will be done using the SELinux reference policy instead.

2006-07-20 SEDarwin (Darwin 8.6) technology preview: Download tarball
This is the first snapshot based on Mac OS 10.4.x (Tiger). The kernel and userland components are functional but the included policy file has not been updated for Tiger. Future policy work will be done using the SELinux reference policy instead.

2006-06-27 SEDarwin (Darwin 8.7) technology preview: Download tarball
This is the final snapshot based on Mac OS 10.3.x (Panther).

2006-04-11 AFCEA Technology Over Bagels Presentation: Download slides

2006-03-15 SEDarwin (Darwin 7.8) snapshot: Download tarball