GRSecurity vs LIDS

[frank-n-f]

does anyone here have experience with both LIDS and Gresucrity's ACL system? If anyone like that is out there, how do they stack up to each other if at all.

any info would be greatly appreciated

thanks

Mark

[fonya]

Just see this:
http://www.grsecurity.net/grsecuritydoc.html

You can read some compraision, from Michael Dalton, and Brad Spengler.

Fonya

[Technion]

I used LIDS a long ago before grsecurity was out. Technical discussion aside, I found it absolutely painful.
At the time, it broke *.
It required huge amounts of time deciding what you want to allow and disallow and months later you would still find things you needed to fix.


Disclaimer: Newer versions may well be better.