Re: LIDS and debian
I would also like to help if possible. I haven't loaded an IDS software
specific for Debian and most my Apps are on commercial property O/S,
ie. Sun, HP, and Microsoft. What IDS are you playing with, or are you
just modifying the kernel?
Dan
---- Ben Harvey <harveyb@iinet.net.au> wrote:
> Hello!
>
> I am playing with the Linux Intrusion Detection System for 2.4.0 and
> I'm having some trouble writing ACL's. Does anybody have Debian
> specific ACL examples for lids?
>
> I can boot & shutdown OK, but I am allowing a lot of really bad
> stuff. eg:
> /sbin/lidsadm -A -i -s /etc/init.d/rcS -o /etc -j WRITE
>
> Any suggestions before I hose my test-box (its getting old and I'm
> getting reckless!)
>
> TIA
> Ben Harvey
> --
>
>
> --
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
>
___________________________________________________________________
To get your own FREE ZDNet Onebox - FREE voicemail, email, and fax,
all in one place - sign up today at http://www.zdnetonebox.com
Reply to: