LIDS 1.2.2rc3 for Linux kernel 2.4.27 released
Yusuf Wilajati Purna <[email protected]>
| Newsgroups | gmane.comp.security.linux,gmane.comp.security.ids |
|---|---|
| Message-ID | <[email protected]> |
Hi, LIDS 1.2.2rc3 for kernel 2.4.27 has been released. LIDS 1.2.2rc3 includes the LIDS TDE application sandboxing feature that becomes more stable. Network access restriction controlled by CAP_NET_BIND_SERVICE and CAP_NET_BROADCAST with port ranges has been added to the LIDS sandbox feature to make the created sandbox more solid. The LIDS TDE paper ( http://www.lids.org/document/LIDS-TDE-feature.txt ) has been updated. Now, it includes sample configurations for sandboxing "Apache" and "Samba". You need to use lidstool 0.5.6 for this version. This version fixed a bug in lids_tde_policy() as reported by Yannick Le Briquer and fixed compilation errors due to a multi-line constant string reported by Samuel Greenfeld. Some patches from Radek Bohunsky for LIDS 1.1.2 has been applied into this version as well. Furthermore, lots of LIDS code cleanups have been done in this version. Thanks to Yannick Le Briquer and Samuel Greenfeld for reporting the bugs and again to Radek Bohunsky for the patches. LIDS 1.2.2rc3 can be downloaded from http://www.lids.org Please enjoy, give it a try, start sandboxing your daemons, and report any bugs. :-) Regards, purna -- Yusuf Wilajati Purna <[email protected]> 1024D/7354A078 Key fingerprint = 7F4F 8433 C65F 3502 BC93 F529 BFDE F939 7354 A078