=?iso-8859-1?Q?=BB=D8=B8=B4:_linux_IDS_project_=2C_lids-0.1-2.2.12_relesa?=

xie hua gang (xhg@gem.ncic.ac.cn)
Sat, 16 Oct 1999 17:40:10 +0800


-----Original Message-----
发件人: Lars Marowsky-Bree <lmb@kernel.org>
收件人: Xie Hua Gang <xhg@gem.ncic.ac.cn>
抄送: linux-kernel@vger.rutgers.edu <linux-kernel@vger.rutgers.edu>
日期: 1999年10月17日 4:02
主题: Re: linux IDS project , lids-0.1-2.2.12 relesase.

>On 1999-10-16T10:46:01,
> Xie Hua Gang <xhg@gem.ncic.ac.cn> said:
>
>> http://gem.ncic.ac.cn/~xhg/lids/
>> http://www.soaring-bird.com.cn/oss_proj/lids/
>
>> It can protect the important file from being changed. Any one include
>> Root
>> can not change the protected files or diretory and its sub-diretory .
>
>How is this different from immutable files (as supported by ext2) and
setting
>the securelevel to non-zero?

>
>I see it is independent of the fs, which is good. But it should be possible
to
>activate the security level at runtime.
>
Yes, It active the security level at runtime by default , unless it is
turn down
by setting "security=0" when LILO appears.
.
>However, I admit that as soon as it has logging support it will be useful.
It
>will not prevent modifying the files though, unless you also disable access
to
>the raw device.

I am now working on the logging now.. I think it may include the uid/gid of
user who
violate the rules and the command he want to make , etc.

>
>
>--
>Lars Marowsky-Br閑 http://lars.maro \ geek, BOFH, psychopath, magician, /
> lars@marowsky-bree.de wsky-bree.de/ \ killer, looney, genius, pervert /
>pgp-key-id: 0x09e360c5 / ff 2a 82 e8 6b 85 79 23 9c da b5 81 d4 fc 29 e6

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/