6 Jan
2005
6 Jan
'05
21:53
3 Years ago I tried out LIDS. It can make your linux box absolutely unusable for anyone without the the access key. You can really give everyone the root pw once it's setup. They can't do any damage. But it's a huge PITA to setup.
I had very good luck setting up grsecurity. It has been a bit of a pain since the 2.6 kernel patches for grsecurity have been slow comming, but it looks like this is going to change. grsecurity does provide essentially everything BSD/LIDS provide, and it is nicely configurable to your likings either at compile time or later via sysctl. too bad its not an option of the default Suse install :-/. -- -------------------- Johannes Ullrich jullrich@euclidian.com