From: Pedro Rosa <Pedro.Rosa@ksu.ru>
To: Stephen Smalley <sds@tislabs.com>
Cc: Jeff Largent <jlargent@imagelinks.com>, selinux <selinux@tycho.nsa.gov>
Subject: Re: lids
Date: Wed, 21 Mar 2001 00:29:31 +0300 [thread overview]
Message-ID: <3AB7CBBB.1060404@ksu.ru> (raw)
In-Reply-To: Pine.SOL.3.95.1010320083916.9741B-100000@clipper.gw.tislabs.com
Sorry but LIDS stands for Linux Intrusion Detection System. Its main
purpose has nothing to do with what SELinux deals with. I don't know too
much about the inners of LIDS but I know that it is an evolution of some
ideas based on NIDS (Network Intrusion Detection System). Well it's a
few monthes since I took a look at LIDS so I might be wrong in some
point. The tool seems to follow some principles for a NIDS system but it
is quite weaker. Besides it seems more concentrated on the inners of the
system rather than caring about the networking environment.
In fact LIDS is a complementary task of what SELinux pretends to
answer. While SELinux tries cares for the permissions of the system and
controls their use, LIDS tries to answer for situations when such
control is overcomed.
Ektanoor
Stephen Smalley wrote:
> Security-Enhanced Linux (SELinux) has a well-defined architecture for
> flexible mandatory access controls that has been experimentally
<skipped>
>
>
>
--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next prev parent reply other threads:[~2001-03-20 21:40 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2001-03-19 19:44 lids Jeff Largent
2001-03-20 14:22 ` lids Stephen Smalley
2001-03-20 21:29 ` Pedro Rosa [this message]
2001-03-20 22:20 ` lids Stephen Smalley
2001-03-20 22:41 ` lids Jose Nazario
2001-03-21 0:37 ` lids Pedro Rosa
2001-03-21 0:31 ` lids Tracy R Reed
2001-03-21 0:56 ` lids Pedro Rosa
2001-03-21 14:20 ` lids Stephen Smalley
2001-03-21 16:46 ` lids Pedro Rosa
2001-03-22 11:09 ` [selinux] lids Magosányi Árpád
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3AB7CBBB.1060404@ksu.ru \
--to=pedro.rosa@ksu.ru \
--cc=jlargent@imagelinks.com \
--cc=sds@tislabs.com \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.