Re: lids

[Pedro Rosa <Pedro.Rosa@ksu.ru>]

Tracy R Reed wrote:

> On Wed, Mar 21, 2001 at 12:29:31AM +0300, Pedro Rosa wrote:
> 
>> Sorry but LIDS stands for Linux Intrusion Detection System. Its main 
>> purpose has nothing to do with what SELinux deals with. I don't know too 
> 
> 
> The name is a misnomer. It doesn't have much to do with intrusion
> detection. Even the portscanner is acknowledged as not really fitting in
> with the rest of the system and most believe it should be elsewhere. They
> have occasionally discussed changing the name on the LIDS list where I am
> a subscriber. LIDS implements MACs much like SE Linux. It has little if
> anything to do with NIDS. Would you please stop ranting so much and just
> spend a few days reading and considering the opinions of others?

Please stop the flame ok? First tell me where are the MACs in LIDS? 
Don't mess ACLs with MACs. MAC is mostly like an ACL but still needs 
that central administrative mechanism that NSA docs tell a lot about. 
And LIDS doesn't have such. Besides I did read LIDS before stating this 
stuff. Yes, it was some monthes ago on 1.0.2 (October if I'm not 
mistaken). And while I may not remember everything I read, I see that 
comparing SELinux to LIDS is the same as comparing an elephant to a 
rhinoceros.

Before teaching others, it is good to just make a pass by through the 
specs, you know?

> 

Ektanoor


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.