LIDS on PowerPC

Greetings.

I was wondering if anyone is willing to help find, or already has an idea on why the Linux Intrusion Detection System (LIDS [www.lids.org]) doesn't allow my ppc system to boot.

Specifically, I have an oldworld system, and using BootX or miBoot with a LIDS kernel (with lids runtime enabled or disabled) results in a hang.  The kernel doesn't even get to the "BootX text" screen.  The LIDS system seems to be an archetecure independent set of modifications, but appears that something was missed in terms of ppc booting (at least on OW systems).

LIDS is a set of kernel modifications that aim to increase system security, especially for server-type systems.  One way I describe it is that it can turn root and daemons/programs from an ultimate power to (on the most paranoid of systems) a normal user or process with limited, selective access.  This way a rooted system and even a trojan can be limited in what they are capable of doing.  Upon supplying a password, this behavior can be disabled for a single terminal.  Network security features are also part of LIDS.

Back in July, I mentioned this on LIDS's own mailing list, but I suppose linuxppc-devel would know more about what conflicts may arise from such kernel modifications.

Thank you all for your time.

--
Joseph P. Garcia
http://www.lycestra.com/

** Sent via the linuxppc-dev mail list. See http://lists.linuxppc.org/

Joseph P. Garcia writes:

Specifically, I have an oldworld system, and using BootX or miBoot
with a LIDS kernel (with lids runtime enabled or disabled) results
in a hang.  The kernel doesn't even get to the "BootX text" screen.

Hmmm, I would be surprised if LIDS was affecting anything that early
on in the boot process.  Have you successfully built and booted a
kernel without LIDS?

Paul.

** Sent via the linuxppc-dev mail list. See http://lists.linuxppc.org/

On Sat, 13 Oct 2001 21:01:53 +1000 (EST)
Paul Mackerras [off-list ref] wrote:

Hmmm, I would be surprised if LIDS was affecting anything that early
on in the boot process.  Have you successfully built and booted a
kernel without LIDS?

yes I have built and booted many kernels.  And I am also suprised at this. :) I've tried it with bootx text disabled, and it still did not work.  I don't know what happens with yaboot.

To my suprise, my original email made it into the non-intel hardware question of the LIDS FAQ at http://www.lids.org/lids-faq/LIDS-FAQ.html

--
Joseph P. Garcia
http://www.lycestra.com/

** Sent via the linuxppc-dev mail list. See http://lists.linuxppc.org/