ABAC 2.1.0 ---------- - The API visible to programmers is much richer and should make development simpler. As part of this the libcreddy/libabac distinction has disappeared. All libcreddy functions are now available through libabac. - updated to use strongswan 4.6.4. Strongswan 4.4.0 had become very outdated. - Added more examples and documentation. - add a new '--subject-link' option to creddy --attribute to hold the linking role - add --dbdump option to abac_prover_yap to retrieve all prolog clauses stored in the db WARNING - There are occasional spurious error messages originated from Strongswan during access of the attribute credentials. Those messages are due to libstrongswan mishandling certain values of authorizedKeyIdentifier in a non-destructive way. While we are working with the strongswan developers to remove these messages, they should not affect ABAC in any way. Here are sample messages: L6 - keyIdentifier: length of ASN.1 object invalid or too large L6 - authorityCertSerialNumber: length of ASN.1 object invalid or too large Do report to us if your ABAC is not behaving as expected and messages like above seem to be a factor.. ABAC 2.0.0 ---------- - libabac now can handle RT2 attribute rules with dynamic and static constraints