Re: Is IDS for Linux really up to snuff?
Posted in 2000
Topics: Platform-Specific Issues
Last I checked you could not use raw-devs on Linux IDS. Anyone know if this is still the case ? Richard Palmer. "F. Fernandez" wrote: > We're using IDS on Debian GNU Linux 2.1 (kernel 2.0.36) for internal > development for 6 months now and 12 of our clients have migrated too. > > It seems fine for "workgroup level" usage! > > Fernando > -- > Fernando Fernandez > http://despodata.pt/ddata/pessoal/ferdez.htm
richard palmer <palric@tor.maves.ca> writes: > Last I checked you could not use raw-devs on Linux IDS. Anyone know > if this is still the case ? Red Hat 6.0 and 6.1, as shipped, don't support raw devices. However, IDS on Red Hat requires removing shadow password support, if you want database security, because it's not PAM-aware. *I* lay the blame personally at the feet of the engineer(s) who did the port. There's no excuse for not understanding the OS you're porting to. -- Forte International, P.O. Box 1412, Ridgecrest, CA 93556-1412 Ronald Cole <ronald@forte-intl.com> Phone: (760) 499-9142 President, CEO Fax: (760) 499-9152 My GPG fingerprint: C3AF 4BE9 BEA6 F1C2 B084 4A88 8851 E6C8 69E3 B00B
In article <m366x58klk.fsf@yakisoba.forte-intl.com>, Ronald Cole wrote: >richard palmer <palric@tor.maves.ca> writes: >> Last I checked you could not use raw-devs on Linux IDS. Anyone know >> if this is still the case ? > >Red Hat 6.0 and 6.1, as shipped, don't support raw devices. > >However, IDS on Red Hat requires removing shadow password support, if >you want database security, because it's not PAM-aware. *I* lay the >blame personally at the feet of the engineer(s) who did the port. Indeed but it's odd. Informix authenticates fine with shadow passwords under debian, having said that though I don't use PAM here. It's a shame informix doesn't work with PAM though. TTFN -- Roger