1.1. Overview

LIDS is an enhancement for the Linux kernel, currently maintained by Xie Huagang and Philippe Biondi, which implements additional security features including:

• file access control rules on a programme-by-programme basis;
  
  
• fine-grained control of capabilities of root-owned processes, again on a programme-by-programme basis.

rpms are available for some systems, but the usual way to install a LIDS-enabled Kernel is to patch a "vanilla" source tree and compile.

For an introduction to file access control rules and capabilities see the Quick Start, below.