Re: [gentoo-hardened] What's been done so far?

[Joachim Blaabjerg]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday 18 March 2003 18:53, Sven Vermeulen wrote:
> On Tue, Mar 18, 2003 at 11:44:32AM -0600, nick anderson wrote:
> > what about the lids project?
>
> Hmmm, from their website:
>
> """
> 2.4 series development version LIDS 1.0.9 for 2.4.5 is out.
> Fri Jun 1 09:31:52 CST 2001
> """
>
> So it's not very actively developed. Furthermore I think that LIDS is
> more of a kernelpatch to integrate easier with the daemons that the
> project provides, and it is, as the name sais, an Intrusion Detection
> System.

I'd have to disagree. First of all - the latest news aren't on the bottom of 
the page ;)

Second - which daemons are you talking about? I've been working pretty 
closely with the LIDS devels for a while, and the last time I checked it 
was a MAC system which didn't ship with any daemons. Are you sure you 
aren't thinking of a different project?

My biggest concern with LIDS is its design. It's still inode based, right? 
IMO, systrace and grsecurity ACLs solve the same problems as LIDS in a much 
more elegant fashion.

> But don't forget what gentoo-hardened is all about: it's not solely
> implementing SELinux in Gentoo, it's all about security, so having
> LIDS-support (and others) isn't out of the question.

Indeed, if someone's willing to do the hard work :)

- -- 
Joachim Blaabjerg
Gentoo Linux Security Developer
GPG key @ http://cvs.gentoo.org/~styx
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+d19qFJKdDpq6hFsRAl+lAJwK3x64v3bH/P8STVD7X6ve0EcnMACfU+ze
hzWUs4ofv7SEct2cv9Gyjms=
=3ogB
-----END PGP SIGNATURE-----


--
gentoo-hardened@g.o mailing list