Linux IDS Patch (lids) for Linux

LIDS 1.0.1 for kernel 2.4.0-test8
----------------------------------
This is the first lids patch to 2.4.0 series, It is ported from lids 0.9.8 
for 2.2.17. 
For the code in 2.4.0 series is difference from the 2.2 series, it is very 
difficult to port a perfect 2.2-compatible patch to 2.4 series. So till now,
It lack the feature of hidden network connection while its 
process is hidden. But it also have many code clean.

NOTE, you must update your lidsadm and lids.conf when using this 
new version for one capability change in 2.4.0-test8,  It add a new 
capability name CAP_MKNOD as number 27, so the CAP_HIDDEN & 
CAP_INIT_KILL's number increase to 28 and 29. pls check the source 
include/linux/capability.h.

This version also contain a patch with reiserfs, you can download it from 
http://www.lids.org or other mirrors sites.

MORE changes, see ChangeLog 

--------------------------------------------------------------------
LIDS 0.9.8 for 2.2.16
---------------------
NOTE: lids.conf in this version is moved to /etc/lids/. pls move the old lids.conf to that directory. 
  
***You must move your /etc/lids.conf into /etc/lids/lids.conf for the change!**

And pls use 'lidsadm -P' to generate the password for switch the security level. 
And Edit the /etc/lids/lids.cap for the set to capability enable/disable. 

Edit /etc/lids/lids.net for the parameter for sending msg through network.

LIDS 0.9.7 for 2.2.16 
----------------------
NOTE: the LIDS has a new design after lids-0.9.2 and the lidsadm also change to fit the new design. So the HOWTOs is obsolete for the new version.

You should view the lidsadm manpage by "man lidsadm" after install the lidsadm to get the lastest usage information. Sorry for the unconvience and the HOWTOs will be updated soon. I hope.

This patch (Version 0.6) is for the Linux kernel 2.2.13. 

This version is developed from an unofficial release by Philippe Biondi 
(philippe.biondi@webmotion.net) and added new features & made some bugfixed 
by Xie Huagang(xhg@gem.ncic.ac.cn).

LIDS 0.6 has a brand new design. Thanks Philippe.

The basic behaviour (files/dir/dev selection...) remain the same.
But what was modularized is now already in the kernel. To keep the
"seal" concept (ie sealing modules/mounted devices/daemons at a given 
time) some sysctl have been created. This method doesn't need modules 
anymore and is more flexible.

More about LIDS, go to http://www.lids.org for more details.
