📄 00000007.htm
字号:
<HTML><HEAD> <TITLE>BBS水木清华站∶精华区</TITLE></HEAD><BODY><CENTER><H1>BBS水木清华站∶精华区</H1></CENTER>发信人: vertex (lancelord), 信区: Linux <BR>标 题: Linux Intrusion Detection 0.4 released <BR>发信站: BBS 水木清华站 (Fri Nov 19 21:56:40 1999) <BR> <BR>Linux Intrusion Detection System 0.4 release <BR>--------------------------------------- <BR> <BR>Linux Intrusion Detection System is a linux kernel patch <BR>and modules to enhance the linux kernel security. It can <BR>protect important files from being changed. When it's in <BR>effect, no one (including root) can change the protected <BR>files or directories and their sub-directories, and the <BR>protected append-only files can only be appended. It can prevent <BR>loaded modules from being unload, mounted filesystems from being <BR>unmount and lauched processes from being kill. It can <BR>also protect the hard disk's MBR, and can also disallow <BR>sniffing while the NIC is in promiscuous mode. <BR> <BR>For more detail , visit the homepage at <BR> <BR> <A HREF="http://www.soaring-bird.com.cn/oss_proj/lids/">http://www.soaring-bird.com.cn/oss_proj/lids/</A> <BR> <BR> <BR>主要特征: <BR> <BR>1. 重要文件的保护 <BR> 在生效的情况下,任何人包括 root 均不能改变受保护的文件. <BR>2. 重要 log 文件的保护 <BR> log 文件只能增长.不能改变 <BR>3. 安全的文件系统 <BR> 系统启动时候载入的文件系统不能卸载.启动后载入的可以 umount <BR> 启动后载入的系统只能 mount 到 /mnt/ <BR>4. 安全的进程保护 <BR> 启动后载入的进程( 其父为 1 ) 不能被杀. <BR>5. 安全的模块载入和载出 <BR> 只能由/sbin/insmod 载入modules. <BR> 只能载入 /lib/modules 下的 modules <BR> 系统启动时载入的 modules 不能 rmmod <BR> <BR>6. 更好的 log 信息. <BR> <BR>7 . 更多的优点有待你的挖掘 :-)) <BR> <BR> <BR> <BR>-- <BR>※ 修改:·vertex 於 Nov 19 21:57:05 修改本文·[FROM: 162.105.138.50] <BR>※ 来源:·BBS 水木清华站 bbs.net.tsinghua.edu.cn·[FROM: 162.105.138.50] <BR><CENTER><H1>BBS水木清华站∶精华区</H1></CENTER></BODY></HTML>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -