Securing your system with Linux Intrusion Detection System
Finding Out More
As of this writing, the LIDS project is in a state of transition. Updates to the project website are fairly infrequent. However, the most recent file on the LIDS homepage [1] is relatively recent (January 2009). The latest LIDS version is 2.2.3rc7, which is for kernel 2.6.28.
LIDS documentation is relatively old. The FAQ is one of the more recent documents, and it is dated May 19th, 2003. I didn't encounter anything technical that appeared incorrect, with the exception that some documents indicate that lidsadm still performs the configuration, and a few links were dead. A few of the documents refer to a LIDS wiki, but as of this writing, the hostname is not resolved by DNS. The LIDS homepage includes links to several documents that are only in Japanese.
SourceForge lets you subscribe to a LIDS mailing list; however, since I started subscribing, I have gotten nothing but spam. A low-traffic forum is available from the LIDS homepage, but responses can take a week or longer.
The current state of the help sources means that, although the developers continue to update the LDS module, you are sometimes on your own if you run into trouble, which means you should make room for some trial and error. I suggest using one of the VMware images to become familiar with LIDS before you install it on a production machine.
Infos
- SELinux: http://fedoraproject.org/wiki/SELinux
- AppArmor: http://www.opensuse.org/AppArmor
- LIDS homepage: www.lids.org
- Downloadable VMware images: http://www.lids.jp/vmware.download.html
« Previous 1 2 3