ABAC 2.1.0 ---------- - libcreddy has been merged into libabac and creddy id and attribute credential generations are invoking libabac to do the work - add a new '--subject-link' option to creddy --attribute to hold the linking role - add --dbdump option to abac_prover_yap to retrieve all prolog clauses stored in the db - updated to use strongswan 4.6.4 - There are occasional error messages originated from Strongswan during access of the attribute credentials, but ABAC is still working as it should. Those messages are due to libstrongswan not handling certain value of authorizedKeyIdentifier as expected even though it really should not need to process for it (it does not need it). Here are sample of messages coming through the stderr pipe, L6 - keyIdentifier: length of ASN.1 object invalid or too large L6 - authorityCertSerialNumber: length of ASN.1 object invalid or too large You might also see messages about authorityCertIssuer Do report to us if your ABAC is not behaving as expected and messages like above seem to be a factor.. ABAC 2.0.0 ---------- - libabac now can handle RT2 attribute rules with dynamic and static constraints