Thank you for the information. I am forwarding this to the list. Andreas Steinmetz writes: > Hi, > just saw your post in the reiserfs list (I'm not subscribed) about LIDS > compatability. > I must say that as LIDS works at the VFS layer it works well in combination > with reiserfs, at least for the 2.2 series kernels I'm using right now. > There is no need to have init drop capabilities when you use LIDS, LIDS does > this already. The nice feature about LIDS is that you can grant processes (a > script is a process in this context) capabilities with a defineable inheritabce > depth. Thus e.g. a well defined and LIDS secured startup script may grant some > process capabilities through inheritance where the process when started from > any other context doesn't have the capabilities. This allows for fine grained > system security. Nikita.
