Section: .. / linux / security / lids /
| /// File Name: |
lidstools-2.2.7.2.tar.gz |
Description:
|
This is the lidstools source package. It contains the source for the lidsconf and lidsadm utilities used to administrate systems enhanced with the Linux Intrusion Detection System kernel patch. These tools are useless without a LIDS enhanced kernel.
| | Homepage: | http://www.lids.org/ | | Changes: | Multiple bug fixes and enhancements. | | File Size: | 307810 | | Last Modified: | Dec 13 18:33:23 2007 |
| MD5 Checksum: | 9bea6b2eccf6e6c8399a532dcaa39b46 |
|
| /// File Name: |
lids-2.2.1rc2-2.6.11.6.tar.gz |
Description:
|
The Linux Intrusion Detection System (LIDS) is a patch which enhances the kernel's security by implementing a reference monitor and Mandatory Access Control (MAC). When it is in effect, chosen file access, all system/network administration operations, any capability use, raw device, memory, and I/O access can be made impossible even for root. You can define which programs may access specific files. It uses and extends the system capabilities bounding set to control the whole system and adds some network and filesystem security features to the kernel to enhance the security. You can finely tune the security protections online, hide sensitive processes, receive security alerts through the network, and more.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Minor bug fixes, feature enhancements. | | File Size: | 279583 | | Last Modified: | Mar 29 01:22:00 2005 |
| MD5 Checksum: | 81828e5931fe0030742634ae8773e6de |
|
| /// File Name: |
lids-2.2.1rc3-2.6.12.tar.gz |
Description:
|
The Linux Intrusion Detection System (LIDS) is a patch which enhances the kernel's security by implementing a reference monitor and Mandatory Access Control (MAC). When it is in effect, chosen file access, all system/network administration operations, any capability use, raw device, memory, and I/O access can be made impossible even for root. You can define which programs may access specific files. It uses and extends the system capabilities bounding set to control the whole system and adds some network and filesystem security features to the kernel to enhance the security. You can finely tune the security protections online, hide sensitive processes, receive security alerts through the network, and more.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Fixed a security bug when checking the LD_XXXX. Some other changes. | | File Size: | 279087 | | Last Modified: | Jun 23 03:59:22 2005 |
| MD5 Checksum: | e8cbb00a25506284c0bd544d06cd6da7 |
|
| /// File Name: |
lids-2.2.1pre1-2.6.9.tar.gz |
Description:
|
The Linux Intrusion Detection System (LIDS) is a patch which enhances the kernel's security by implementing a reference monitor and Mandatory Access Control (MAC). When it is in effect, chosen file access, all system/network administration operations, any capability use, raw device, memory, and I/O access can be made impossible even for root. You can define which programs may access specific files. It uses and extends the system capabilities bounding set to control the whole system and adds some network and filesystem security features to the kernel to enhance the security. You can finely tune the security protections online, hide sensitive processes, receive security alerts through the network, and more.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Minor bug fixes, feature enhancements. | | File Size: | 277911 | | Last Modified: | Dec 30 03:47:56 2004 |
| MD5 Checksum: | a36bd23eb085b2f1dbd3c3128c903156 |
|
| /// File Name: |
lids-2.2.0rc1-2.6.6.tar.gz |
Description:
|
The Linux Intrusion Detection System (LIDS) is a patch which enhances the kernel's security by implementing a reference monitor and Mandatory Access Control (MAC). When it is in effect, chosen file access, all system/network administration operations, any capability use, raw device, memory, and I/O access can be made impossible even for root. You can define which programs may access specific files. It uses and extends the system capabilities bounding set to control the whole system and adds some network and filesystem security features to the kernel to enhance the security. You can finely tune the security protections online, hide sensitive processes, receive security alerts through the network, and more.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Various bug fixes including a patch to fix a buffer overflow. | | File Size: | 272954 | | Last Modified: | Jun 17 23:59:02 2004 |
| MD5 Checksum: | 41fef19259e24d5c34f33b426291b036 |
|
| /// File Name: |
lids-2.2.0rc2-2.6.7.tar.gz |
Description:
|
The Linux Intrusion Detection System (LIDS) is a patch which enhances the kernel's security by implementing a reference monitor and Mandatory Access Control (MAC). When it is in effect, chosen file access, all system/network administration operations, any capability use, raw device, memory, and I/O access can be made impossible even for root. You can define which programs may access specific files. It uses and extends the system capabilities bounding set to control the whole system and adds some network and filesystem security features to the kernel to enhance the security. You can finely tune the security protections online, hide sensitive processes, receive security alerts through the network, and more.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Minor bug fixes, feature enhancements. | | File Size: | 272835 | | Last Modified: | Jul 9 16:03:00 2004 |
| MD5 Checksum: | 611d1c70d8fd8d1bc65d67e1154ba94f |
|
| /// File Name: |
lids-2.2.0pre3-2.6.5.tar.gz |
Description:
|
The Linux Intrusion Detection System (LIDS) is a patch which enhances the kernel's security by implementing a reference monitor and Mandatory Access Control (MAC). When it is in effect, chosen file access, all system/network administration operations, any capability use, raw device, memory, and I/O access can be made impossible even for root. You can define which programs may access specific files. It uses and extends the system capabilities bounding set to control the whole system and adds some network and filesystem security features to the kernel to enhance the security. You can finely tune the security protections online, hide sensitive processes, receive security alerts through the network, and more.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Kconfig ifdef cleanup, added back the fastguessing for acl searching, capability fixed up. | | File Size: | 270555 | | Last Modified: | Apr 20 07:03:00 2004 |
| MD5 Checksum: | 794ee8f6ed8eb59243a8e8a3c625e738 |
|
| /// File Name: |
lids-2.2.0pre2-2.6.5.tar.gz |
Description:
|
The Linux Intrusion Detection System (LIDS) is a patch which enhances the kernel's security by implementing a reference monitor and Mandatory Access Control (MAC). When it is in effect, chosen file access, all system/network administration operations, any capability use, raw device, memory, and I/O access can be made impossible even for root. You can define which programs may access specific files. It uses and extends the system capabilities bounding set to control the whole system and adds some network and filesystem security features to the kernel to enhance the security. You can finely tune the security protections online, hide sensitive processes, receive security alerts through the network, and more.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Release for 2.6.5. Added filesystem support, Enhanced ACL/searching performance, various other feature additions. | | File Size: | 269279 | | Last Modified: | Apr 12 01:01:00 2004 |
| MD5 Checksum: | a2e115240f8e31495af8587ae8807333 |
|
| /// File Name: |
lids-2.2.0pre4-2.6.6.tar.gz |
Description:
|
The Linux Intrusion Detection System (LIDS) is a patch which enhances the kernel's security by implementing a reference monitor and Mandatory Access Control (MAC). When it is in effect, chosen file access, all system/network administration operations, any capability use, raw device, memory, and I/O access can be made impossible even for root. You can define which programs may access specific files. It uses and extends the system capabilities bounding set to control the whole system and adds some network and filesystem security features to the kernel to enhance the security. You can finely tune the security protections online, hide sensitive processes, receive security alerts through the network, and more.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Bind checker bug fixed, removed fast guessing acl searching instead using old way, added lids_bprm_apply_creds. | | File Size: | 269071 | | Last Modified: | May 18 20:06:49 2004 |
| MD5 Checksum: | 4746d32acfd38895f33ac97248c1c5ed |
|
| /// File Name: |
lids-1.1.0-2.4.16.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off on the fly and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. LIDS FAQ available here. Changelog available here.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | LIDS can be used for the 2.4.16 kernel, /etc/lids access deny is no more hardcoded and has to be included in the configuration and several bugs where fixed. | | File Size: | 216299 | | Last Modified: | Dec 29 01:27:48 2001 |
| MD5 Checksum: | d136b6aa536027a514e6e5a04914a35d |
|
| /// File Name: |
lids-2.0.1-2.5.47.tar.gz |
Description:
|
The Linux Intrusion Detection System (LIDS) is a patch which enhances the kernel's security by implementing a reference monitor and Mandatory Access Control (MAC). When it is in effect, chosen file access, all system/network administration operations, any capability use, raw device, memory, and I/O access can be made impossible even for root. You can define which programs may access specific files. It uses and extends the system capabilities bounding set to control the whole system and adds some network and filesystem security features to the kernel to enhance the security. You can finely tune the security protections online, hide sensitive processes, receive security alerts through the network, and more.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Code was cleaned up and some unused configuration options were removed. | | File Size: | 205999 | | Last Modified: | Nov 19 11:12:55 2002 |
| MD5 Checksum: | d0e933c88dd459c05dc0ad8012f6c583 |
|
| /// File Name: |
lids-1.0.14-2.4.9.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off on the fly and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. LIDS FAQ available here. Changelog available here.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Ported to kernel v2.4.9 and bugfixes. | | File Size: | 184785 | | Last Modified: | Aug 18 22:14:18 2001 |
| MD5 Checksum: | f7b51e3b0d89856443a183226cfdaead |
|
| /// File Name: |
lids-0.10.1-2.2.19.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off on the fly and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. LIDS FAQ available here. Changelog available here.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Time_scale and port_scale support from LIDS 1.0.14-2.4.9, bug fixes, changes to Config.in to allow users to change the default selected item when reconfiguring the kernel. | | File Size: | 158586 | | Last Modified: | Aug 26 01:00:56 2001 |
| MD5 Checksum: | 1ef982472608c218a38d923faef606c3 |
|
| /// File Name: |
lids-0.10-2.2.19.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off on the fly and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. LIDS FAQ available here. Changelog available here.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | This is a stable version of LIDS. It contains a sent mail alert compatible with qmail. There are many code cleanups, and many typos have been fixed. An added return character in do_execve() has been fixed. | | File Size: | 155107 | | Last Modified: | May 30 13:11:11 2001 |
| MD5 Checksum: | 89ea35c3c57ba8297f676b61f87c9ee4 |
|
| /// File Name: |
lids-1.0.15-2.4.9.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off on the fly and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. LIDS FAQ available here. Changelog available here.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Fixed inheritance problems including the kernel going into an endless loop and more lidsadm fixes and code cleanup. | | File Size: | 146261 | | Last Modified: | Sep 21 23:03:28 2001 |
| MD5 Checksum: | 0ffdf8255f6c8078f96990ba7cf672c5 |
|
| /// File Name: |
lids-1.0.8-2.4.4.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off on the fly and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. LIDS FAQ available here. Changelog available here.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Updated for kernel v2.4.4. Most of the "-EROFS" have been changed to to "-EPERM" (the output of the violation would be "permission deny", not "Read only file system"). | | File Size: | 142587 | | Last Modified: | May 23 13:52:26 2001 |
| MD5 Checksum: | dd481a76c50f3787b9358d8ab71b2ef6 |
|
| /// File Name: |
lids-1.0.9-2.4.5.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off on the fly and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. LIDS FAQ available here. Changelog available here.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Ported to kernel v2.4.5, bugfixes, fixes for qmail, restrictions for LIDS mode switching on specified terminals, and adds code cleanups. | | File Size: | 138282 | | Last Modified: | Jun 4 18:07:24 2001 |
| MD5 Checksum: | be4b57bd2ce6f2f85264af1cb8940e67 |
|
| /// File Name: |
lids-2.2.3rc1-2.6.21.patch |
Description:
|
The Linux Intrusion Detection System (LIDS) is a patch which enhances the kernel's security by implementing a reference monitor and Mandatory Access Control (MAC). When it is in effect, chosen file access, all system/network administration operations, any capability use, raw device, memory, and I/O access can be made impossible even for root. You can define which programs may access specific files. It uses and extends the system capabilities bounding set to control the whole system and adds some network and filesystem security features to the kernel to enhance the security. You can finely tune the security protections online, hide sensitive processes, receive security alerts through the network, and more.
| | Homepage: | http://www.lids.org | | Changes: | Updated for 2.6.21. | | File Size: | 120218 | | Last Modified: | Dec 13 18:22:10 2007 |
| MD5 Checksum: | 74cbc9bd91afcb3acc14f5d6ae3938b8 |
|
| /// File Name: |
lids-0.9.6a-2.2.16.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Fixes for capability errors, small bugfixes. | | File Size: | 100234 | | Last Modified: | Jun 23 20:28:34 2000 |
| MD5 Checksum: | b769d8b4e20f853e66a1cb878741915a |
|
| /// File Name: |
lids-0.9.12-2.2.18.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off on the fly and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | The file that acls inherit has had several bugs removed. Multiplatform support has been added to the makefile. Changelog available here. | | File Size: | 96540 | | Last Modified: | Jan 15 01:53:13 2001 |
| MD5 Checksum: | 8cac5d7ec5749fcba0486331cb8c6d75 |
|
| /// File Name: |
lids-0.9.7-2.2.16.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Many bug fixes and code cleanups, initrd support, and acl/inode updates. | | File Size: | 96381 | | Last Modified: | Jul 8 18:31:02 2000 |
| MD5 Checksum: | f2065c3737c78c410db48eda5ab2e6a1 |
|
| /// File Name: |
lids-0.9.13-2.2.18.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off on the fly and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | The lidsadm compiling error was fixed. The code was cleaned. Information when accessing a hidden file was added. A lids_script.sh was added. The default lids.conf was fixed. Changelog available here. | | File Size: | 95552 | | Last Modified: | Mar 9 21:27:27 2001 |
| MD5 Checksum: | da19d1267545032b05656148ef6213db |
|
| /// File Name: |
lids-0.9.15-2.2.19.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off on the fly and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Now works with kernel 2.2.19! Also includes bugfixes in sysctl, and a new lids.conf format checker in lidsadm. Changelog available here. | | File Size: | 95501 | | Last Modified: | Mar 28 16:28:18 2001 |
| MD5 Checksum: | a02f109af93dc7f60b24db9ccafd7873 |
|
| /// File Name: |
lids-0.9.5b-2.2.16.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Compiler error fixes. | | File Size: | 95185 | | Last Modified: | Jun 9 15:58:52 2000 |
| MD5 Checksum: | bcad7518fad309477d2ec5c1f06ed668 |
|
| /// File Name: |
lids-0.9.5a-2.2.16.tar.gz |
Description:
|
The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection.
| | Author: | Xie Hua Gang | | Homepage: | http://www.lids.org | | Changes: | Now works with the 2.2.16 kernel, bugfixes for protecting the mount point and kernel port scan detection. | | File Size: | 95128 | | Last Modified: | Jun 8 20:03:47 2000 |
| MD5 Checksum: | efc860ebce54941438237f652d7fe4ba |
|
|
|
|
|