Jump to content

Linux Intrusion Detection System

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by 81.210.249.249 (talk) at 14:35, 11 November 2013. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

In computer security, the Linux Intrusion Detection System (LIDS) is a patch to the Linux kernel and associated administrative tools that enhances the kernel's security by implementing Mandatory Access Control (MAC). When LIDS is in effect, chosen file access, all system network administration operations, any capability use, raw device, memory, and I/O access can be made impossible even for root. You can define which programs can access specific files. It uses and extends the system capabilities bounding set to control the whole system and adds some network and filesystem security features to the kernel to enhance the security. You can finely tune the security protections online, hide sensitive processes, receive security alerts through the network, and more. LIDS currently support Linux kernel 2.6, 2.4. LIDS is released under the terms of the GNU General Public License (GPL).

Current Status

As of 2013, the Project appears to be dead. The last updates on the homepage and in the associated forum are from 2010.

Awards

See also