Dazuko

Dazuko is a powerful device driver that allows 3rd-party (userland) applications to have more control over file access. This tool was originally developed by H+BEDV Datentechnik GmbH to enable on-access virus scanning, but it has since found many other applications. For instance, users can use it as a file-access monitor/logger or to implement external security measures.

Dazuko operates by intercepting file access calls and then sending the file information to a 3rd-party application. The application then has the power to deny or allow file access, and it will also receive information about the access that just occurred, such as the accessed file, type of access, process id, and user id.

One of the most significant benefits of Dazuko is that it has been released as free software, so users can compile the device driver for their own custom kernels. Additionally, this approach enables project contributors to establish a common interface that 3rd-party file access control software can utilize.

Because Dazuko is free software, it undergoes rigorous scrutiny from many eyes that investigate the source code, leading to increased robustness and security. H+BEDV Datentechnik GmbH will continue to support the project and provide commercial software that uses the Dazuko driver via its interface.

This project provides a fully functional device driver with a well-defined interface, thus enabling any organization to develop software to utilize Dazuko. Currently, Dazuko is usable for Linux 2.2-2.6, Linux/RSBAC and FreeBSD 4/5. However, the project seeks to expand its functionality to support other operating systems like MacOS X, Solaris, OpenBSD, and Windows, among others.

Installation of Dazuko is straightforward and simple, and it involves running the ./configure command and then the make command. Overall, Dazuko is a powerful tool that can be invaluable in securing your system, and we heartily recommend it.