Has anyone every successfully deployed an LIDS-patched kernel on a
production Linux server? 
Although LIDS makes the system impossible to abuse, it also makes it
impossible to administer!
I've created a baseline policy for init/shutdown and almost every
services but still feel reluctant using it on a real server.


Nawapong Nakjang
IT Security Specialist
Security Team, Network Operation Center
KSC Commercial Internet Co, Ltd.
E-Mail: [EMAIL PROTECTED] 

PGP Key:

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP 8.0.2

mQGiBD7/pu8RBADQUn8Cu8paRp3RCOjTaCSn60A+WmeWaR8rJlbVMVAwQHC+ukmK
/NQXjrVal4m2hPN7rDdqPfzIq6+Qqxnl/ABUsC+/Vdl6cUWS2epDnNCU/zsAkvoO
1IrVt4Onu5kazu5zQRSZzvfz6VypKz0lL95iG+zQ4N/8ySl2ulbwV4n8fwCg/0RT
2q04ROhCKARc7v/fqGr7s8sEAKFkrIluQ893iBfu0WzWX0KwegQCPtXqIslya2Ac
Armke/IaXWUL2bteF8WdaG5Z7BEBhw+6s7jeGIazgCCvN4a8P20o2t1lte5fQP3X
JpBsj52ALKX+vD92KA6gTlYX+1GOd8ay4KxEbIB8EVOntHU9Q274FJDpa9GWONzF
h9ZaBACRwgsNiBc/m1jht57fyDLG/e+kAZCUeen/hROok+1XZYluJd24hfFTFgzT
kn7Q3cN2AM2ZuDtLBCeonyTOJKy2ynvoD/yWjIUA9dIE+XWGrgQffr4A32zjOl7/
BdRFjRpbxrq+QCw49JPNLJWfkrRqpEJDer0dzpyxpPWnjDcRwrQfTmF3YXBvbmcg
TmFramFuZyA8dG9ueUBrc2MubmV0PokAWAQQEQIAGAUCPv+m7wgLCQgHAwIBCgIZ
AQUbAwAAAAAKCRCoZlyho4t6xh5jAJ9YvbrO/Db2UX4pc8CdwahP+esF2wCgjZhQ
6uAQENGza7pNEviVAiszTyi5Ag0EPv+m7xAIAPZCV7cIfwgXcqK61qlC8wXo+VMR
OU+28W65Szgg2gGnVqMU6Y9AVfPQB8bLQ6mUrfdMZIZJ+AyDvWXpF9Sh01D49Vlf
3HZSTz09jdvOmeFXklnN/biudE/F/Ha8g8VHMGHOfMlm/xX5u/2RXscBqtNbno2g
pXI61Brwv0YAWCvl9Ij9WE5J280gtJ3kkQc2azNsOA1FHQ98iLMcfFstjvbzySPA
Q/ClWxiNjrtVjLhdONM0/XwXV0OjHRhs3jMhLLUq/zzhsSlAGBGNfISnCnLWhsQD
GcgHKXrKlQzZlp+r0ApQmwJG0wg9ZqRdQZ+cfL2JSyIZJrqrol7DVekyCzsAAgIH
/ioTHmSpvAE8LN4CzkVl79nI6/c4D+7lwDjWd62U0NeM05NoI0EqVooudphX1tay
Z071bsYwVFSdXjYnbERggB4pQmXf5mqwl60PIu1dBEMPjfAj/61KVVuaWu0HBjEt
GJj2lGbG8joUP2+RipkPV+sAPtKyynsx0WsLNCOZfWnVRA/RsEr3nUl6g3REwYE7
lqYaN7f9183D9IXlG7ilEcBeHPAb6LyyE4PDrQum+VsbIFe1DOLHMgr786skWifO
LlexwRRbD++MeymQxju4DsGcCTgPlfKaMsY47jr0NJZuLrJQH8Dy4fYBN9toqFwl
9uokDDvgCnaaM+h/doIjtyiJAEwEGBECAAwFAj7/pu8FGwwAAAAACgkQqGZcoaOL
esZdrACgyqmhGdr+kUibPDWh8sV8kcb0/QYAn0kFoPbZqHvQ92M2uAwuwVBjn1aN
=uaiT
-----END PGP PUBLIC KEY BLOCK-----

Reply via email to