LIDS 1.2.2rc3 for Linux kernel 2.4.27 released
From: Yusuf Wilajati Purna (ywpurna_at_users.sourceforge.net)
Date: 09/15/04
- Previous message: Scott Wimer: "Re: IPS, alternative solutions"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 15 Sep 2004 23:12:21 +0900 To: focus-ids <focus-ids@securityfocus.com>, focus-linux <focus-linux@securityfocus.com>
Hi,
LIDS 1.2.2rc3 for kernel 2.4.27 has been released.
LIDS 1.2.2rc3 includes the LIDS TDE application sandboxing feature
that becomes more stable. Network access restriction controlled by
CAP_NET_BIND_SERVICE and CAP_NET_BROADCAST with port ranges has
been added to the LIDS sandbox feature to make the created sandbox
more solid. The LIDS TDE paper
( http://www.lids.org/document/LIDS-TDE-feature.txt ) has been
updated. Now, it includes sample configurations for sandboxing
"Apache" and "Samba". You need to use lidstool 0.5.6 for this
version.
This version fixed a bug in lids_tde_policy() as reported by
Yannick Le Briquer and fixed compilation errors due to a multi-line
constant string reported by Samuel Greenfeld. Some patches from
Radek Bohunsky for LIDS 1.1.2 has been applied into this version
as well. Furthermore, lots of LIDS code cleanups have been done
in this version.
Thanks to Yannick Le Briquer and Samuel Greenfeld for reporting
the bugs and again to Radek Bohunsky for the patches.
LIDS 1.2.2rc3 can be downloaded from http://www.lids.org
Please enjoy, give it a try, start sandboxing your daemons, and
report any bugs. :-)
Regards,
purna
-- Yusuf Wilajati Purna <ywpurna@users.sourceforge.net> 1024D/7354A078 Key fingerprint = 7F4F 8433 C65F 3502 BC93 F529 BFDE F939 7354 A078 -------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. --------------------------------------------------------------------------
- Previous message: Scott Wimer: "Re: IPS, alternative solutions"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|