|
|
| linux / security / |
To change sort order, click on the category.
Sorted By: File Name. |
| File Name |
Downloads |
File Size |
Last Modified |
| acl-0.5.4-4.tar.gz | 286 | 71557 | Oct 7 12:16:39 1999 |
| Linux, in the tradition of UNIX-like operating systems, implements file system permissions using a rather coarse scheme. While this is sufficient for a surprisingly large set of applications, it is too inflexible for many advanced scenarios. For that reason, all the major commercial UNIX operating systems have extended this simple scheme in one way or the other. For Linux, such extensions are not stable enough yet. Standard distributions do not include ACLs so far. |
| acm-1.02.tar.gz | 589 | 8892 | Feb 22 14:31:37 2000 |
| The Administrators Control Module (ACM) for kernel 2.2.x patches system calls like execve(), setuid(), open(), ipc(), setgid(), setreuid(), and setregid() for better security logging. By Xfer |
| bmap-1.0.16.tar.gz | 649 | 32189 | Apr 12 16:05:16 2000 |
| The Linux kernel includes a powerful, filesystem independant mechanism for mapping logical files onto the sectors they occupy on disk, which can be subverted (with bmap and friends) to perform a variety of functions interesting to the computer forensics community and the computer security community. By Daniel Ridge |
| bmap-1.0.17.tar.gz | 233 | 39631 | Apr 17 13:04:00 2000 |
| The Linux kernel includes a powerful, filesystem independant mechanism for mapping logical files onto the sectors they occupy on disk, which can be subverted (with bmap and friends) to perform a variety of functions interesting to the computer forensics community and the computer security community. Changes: A fix for a casting error that created problems on files located above 2GB. By Daniel Ridge |
| BufOverA.tar.gz | 643 | 161785 | Apr 23 11:45:01 2000 |
| BufOverA is a set of small Linux kernel patches which detect and block buffer overflows. The archive includes a whitepaper. Homepage here. By Massimo Bernaschi |
| capsel.tgz | 228 | 133941 | Jul 25 16:41:00 2000 |
| Capsel v1.55 is a Linux kernel module for v2.2.x with many features that increase your system security. It features the ability to stop chroot jail break, stop ptracing, control the execve call, and removes read permission from core dumps. It also changes the behavior of set*uid system calls which may be used by programs to drop almost all capabilities and UID without dropping capabilities that are needed to work correctly (i.e. bind sockets). Changes: A more restrictive check is made before executing new binaries, the root option has been fixed, and support for SMP machines has been added. Readme available here. Homepage: http://www.elzabsoft.pl/~wp. By Wojciech Purczynski |
| dspspy1.1.0.tar.gz | 352 | 7294 | Jun 6 15:14:50 2000 |
| dspspy is a sound recording utility for spying. dspspy waits until a sound is detected (input via /dev/dsp) and then it records it to a unique file. dspspy records sounds from the microphone to raw sound files. This can be used as a surveillance system. Homepage: http://www.geocities.com/dvoid_2000/projects.html. By Richard Svensson |
| dspspy1.1.2.tar.gz | 138 | 9834 | Jun 8 17:10:00 2000 |
| dspspy is a sound recording utility for spying. dspspy waits until a sound is detected (input via /dev/dsp) and then it records it to a unique file. dspspy records sounds from the microphone to raw sound files. This can be used as a surveillance system. Changes: A new utility has been added for calibrating the mic threshold. Homepage: http://www.geocities.com/dvoid_2000/projects.html. By Richard Svensson |
| dspspy1.1.3.tar.gz | 177 | 11202 | Jun 13 13:17:38 2000 |
| dspspy is a sound recording utility for spying. dspspy waits until a sound is detected (input via /dev/dsp) and then it records it to a unique file. dspspy records sounds from the microphone to raw sound files. This can be used as a surveillance system. Changes: Major code rewrite using the ncurses library. A pause feature using SPACE has been added. Homepage: http://www.geocities.com/dvoid_2000/projects.html. By Richard Svensson |
| gspy-0.1.2-src.tar.g..> | 112 | 145920 | Jul 21 21:26:36 2000 |
| Gspy retrieves images from a video4linux device and processes these into a daily mpeg movie on the disk drive. Each image is recorded with a time stamp to insure accurate real world correlation. Special motion detection algorithms are used to reduce the size of the daily movies by eliminating pictures with similar content as well as the normal compression obtained via the mpeg process. The result is a time lapse video per day with nonlinear time compression using only the images of interest. Screenshot available here. Homepage: http://gspy.sourceforge.net. By Lawrence P. Glaister |
| ippersonality-200007..> | 282 | 208892 | Jul 27 19:37:34 2000 |
| The Linux IP Personality patch fools OS detection by changing some characteristics of the network traffic. Among the things that can be changed are the TCP Initial Sequence Number (ISN), TCP initial window size, TCP options (their types, but also their order in the packet), answers to some pathological TCP packets, and answers to some UDP packets. Homepage: http://ippersonality.sourceforge.net. By Gael Roualland |
| libsafe-1.3.tgz | 456 | 296807 | Apr 21 19:01:58 2000 |
| The libsafe library protects a process against the exploitation of buffer overflow vulnerabilities in process stacks. Libsafe works with any existing pre-compiled executable and can be used transparently, even on a system-wide basis. It works by putting a wrapper around dangerous functions that contain any buffer overflows within the current stack frame, so that the return address can not be changed. Homepage here. By Navjot Singh |
| lids-0.1-2.2.12.tar...> | 279 | 9330 | Oct 15 16:52:49 1999 |
| lids is an intrusion detection system patch for the Linux kernel; it can protect important files from being changed. When it's in effect, no one (including root) can change the protected files or directories and their sub-directories. First release. By Xie Hua Gang |
| lids-0.2-2.2.12.tar...> | 275 | 10208 | Oct 19 12:12:10 1999 |
| lids is an intrusion detection system patch for linux kernel 2.2.12; it can protect important files from being changed. When it's in effect, no one (including root) can change the protected files or directories and their sub-directories. Changes: Bug fixes related to hard links, rename, symlinks , mknod, and mkdir, and now no one can mv, rm, chmod, chown, or ln in the directories you protect. lids homepage. By Xie Hua Gang |
| lids-0.3-2.2.13.tar...> | 281 | 19308 | Oct 29 08:30:40 1999 |
| lids is an intrusion detection system patch for the Linux kernel; it can protect important files from being changed. When it's in effect, no one (including root) can change the protected files or directories and their sub-directories, and the protected append-only files can only be appended. It can also protect the hard disk's MBR, and can also disallow sniffing while the NIC is in promiscuous mode. Changes: Upgraded the kernel version to 2.2.13. Protected append-only files. Protected writing to the hard disk MBR. Fixed some bugs in the last version. Added config tools (lidsadm). Added the patch from Bosko Radivojevic changed APPEND_ONLY and IMMUTABLE flags; added PROMISC mode for network interfaces (disallowing sniffing). lids homepage. By Xie Hua Gang |
| lids-0.4-2.2.13.tar...> | 283 | 22576 | Nov 19 10:33:02 1999 |
| lids is an intrusion detection system patch for the Linux kernel; it can protect important files from being changed. When it's in effect, no one (including root) can change the protected files or directories and their sub-directories, and the protected append-only files can only be appended. It can also protect the hard disk's MBR, and can also disallow sniffing while the NIC is in promiscuous mode. Changes: Seal the kernel program, mounted filesysten protection, loaded modules protection, running processes protection, and more safty and detailed logging. lids homepage. By Xie Hua Gang |
| lids-0.4.1-2.2.13.ta..> | 280 | 34208 | Nov 26 14:16:18 1999 |
| lids is an intrusion detection system patch for the Linux kernel; it can protect important files from being changed. When it's in effect, no one (including root) can change the protected files or directories and their sub-directories, and the protected append-only files can only be appended. It can also protect the hard disk's MBR, and can also disallow sniffing while the NIC is in promiscuous mode. Changes: Now there is a password to turn lids on/off, Fixed bug in protecting MBR writing, Fixed bug in log file protection, and Fixed bugs in lidsadm for security reasons. lids homepage. By Xie Hua Gang |
| lids-0.6-2.2.13.tar...> | 282 | 35786 | Dec 10 13:01:33 1999 |
| Linux IDS Patch - Version 0.6 - Dec 9, 1999. Lids is an intrusion detection system in the Linux kernel. This patch (Version 0.6) is for the Linux kernel 2.2.13. LIDS 0.6 has a brand new design. When LIDS is in effect, no one (including root) can change the protected files or directories and their sub-directories, and the protected append-only files can only be appended. It can also protect the hard disk's MBR, and can also disallow sniffing while the NIC is in promiscuous mode. Changes: IP firewalling rules protection, ptrace syscall lock, Allow some specified processes to access /dev/mem, Modules protection, Mounted filesystem protection, Hide sensitive processes, Running processed protection, More safty & detailed logging. Homepage here. By Xie Hua Gang |
| lids-0.6.1-2.2.13.ta..> | 291 | 35528 | Dec 15 11:42:30 1999 |
| Linux IDS Patch - Version 0.6.1 - Dec 15, 1999. Lids is an intrusion detection system in the Linux kernel. This patch (Version 0.6.1) is for the Linux kernel 2.2.13. LIDS 0.6 has a brand new design. When LIDS is in effect, no one (including root) can change the protected files or directories and their sub-directories, and the protected append-only files can only be appended. It can also protect the hard disk's MBR, and can also disallow sniffing while the NIC is in promiscuous mode. Changes: A bugfix. Homepage here. By Xie Hua Gang |
| lids-0.8-2.2.14.tar...> | 489 | 63260 | Feb 7 11:46:45 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace on your system. LIDS can also provide raw device and I/O access protection. Changes: An even better design - Use of the kernel capabilities, Hot switching capabilities, Allow unmount when shutdown (for UPS), New behaviour for interpretation of lids.conf, Buffers containing passwd are cleaned, and a 2-level encryption password. Homepage here. By Xie Hua Gang |
| lids-0.8.1pre1-psk-2..> | 841 | 69307 | Feb 17 12:02:32 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: LIDS can be locally switched off, ability for some programs to change routes/firewall rules, and a more secure interpretation of lids.conf. Homepage here. By Xie Hua Gang |
| lids-0.8pre1-psk-2.2..> | 439 | 62070 | Jan 18 09:58:18 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace on your system. LIDS can also provide raw device and I/O access protection. Changes: Use of capabilities bounding for even more control, switch of any capability without turning LIDS off, control of programs executed before LIDS is sealed, and unmount special authorization when rebooting for automatic shutdowns. Homepage here. By Xie Hua Gang |
| lids-0.8pre2-psk-2.2..> | 441 | 63625 | Jan 24 13:17:50 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace on your system. LIDS can also provide raw device and I/O access protection. Changes: Minor typos, license to kill for smoother automatic shutdown (UPS), update option for lids.conf dev/inode numbers, and a 2-level encryption password. Homepage here. By Xie Hua Gang |
| lids-0.8pre3-psk-2.2..> | 462 | 63585 | Jan 25 12:15:24 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace on your system. LIDS can also provide raw device and I/O access protection. Changes: A fix for a code regression in 0.8pre2 that can oops the kernel. Homepage here. By Xie Hua Gang |
| lids-0.8pre4-psk-2.2..> | 454 | 63486 | Jan 26 13:06:22 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: Bugfixes. Homepage here. By Xie Hua Gang |
| lids-0.9-2.2.14.tar...> | 395 | 73829 | Apr 26 15:00:28 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: Compilation problem fixed. Homepage here. By Xie Hua Gang |
| lids-0.9.3-2.2.15.ta..> | 308 | 92720 | May 9 13:36:51 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: Fixed bugs in Access control for DENY type, fixed bugs to cause the system crash, fixed bugs lidsadm when updating. Homepage here. By Xie Hua Gang |
| lids-0.9.4-2.2.15.ta..> | 389 | 93399 | May 17 15:54:02 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: Additional checking is done when adding acls, fixes when the kernel is reading lids.conf, fixes for inherit and no_inherit flags, and fixes for lidsadm. Homepage here. By Xie Hua Gang |
| lids-0.9.5-2.2.15.ta..> | 356 | 93898 | May 29 12:12:47 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: Bugfixed for protect mount point, lids_check_base, fixes for lidsadm when adding ACLs, added sparc64 support. Homepage here. By Xie Hua Gang |
| lids-0.9.5a-2.2.16.t..> | 129 | 95128 | Jun 8 17:03:47 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: Now works with the 2.2.16 kernel, bugfixes for protecting the mount point and kernel port scan detection. Homepage: http://www.lids.org. By Xie Hua Gang |
| lids-0.9.5b-2.2.16.t..> | 141 | 95185 | Jun 9 12:58:52 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: Compiler error fixes. Homepage: http://www.lids.org. By Xie Hua Gang |
| lids-0.9.6a-2.2.16.t..> | 630 | 100234 | Jun 23 17:28:34 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: Fixes for capability errors, small bugfixes. Homepage: http://www.lids.org. By Xie Hua Gang |
| lids-0.9.7-2.2.16.ta..> | 583 | 96381 | Jul 8 15:31:02 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: Many bug fixes and code cleanups, initrd support, and acl/inode updates. Homepage: http://www.lids.org. By Xie Hua Gang |
| lids-0.9pre1-2.2.14...> | 566 | 71263 | Apr 1 14:01:31 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: The ability to send security alerts through network using HTTP Post, mail, or remote syslog directly from the kernel, respawning if the top LIDS process is killed, alerts are only one line, and hidden processes network connections are also hidden. Homepage here. By Xie Hua Gang |
| lids-0.9pre2-2.2.14...> | 548 | 73586 | Apr 4 15:46:32 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: Kernel based portscan detection, disconnects a user automatically that violates the rules, and messsage logging when user binds to a port lower than 1024. Homepage here. By Xie Hua Gang |
| lids-0.9pre3-2.2.14...> | 427 | 73328 | Apr 11 15:03:25 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: Fixes for missing symbols for modules and an oops at sealing time, and optional console hangup. Homepage here. By Xie Hua Gang |
| lids-0.9pre4-2.2.14...> | 528 | 72913 | Apr 15 01:06:02 2000 |
| The Linux Intrusion Detection System is a patch which enhances the kernel's security. When it's in effect, many system administration operations can be made impossible even for root. You can turn the security protection on or off online and you can hide sensitive processes and prevent anyone from using ptrace or any other capability on your system. LIDS can also provide raw device and I/O access protection. Changes: Fixes an ugly bug which prevented LIDS from protecting files under the root directory of a partition in some particular cases, and lidsadm switch check fixed. Homepage here. By Xie Hua Gang |
| linux-2.0.38-ow4.tar..> | 280 | 25659 | Oct 27 13:53:49 1999 |
| This patch (for kernel version 2.0.38) is a collection of security-related features for the Linux kernel, all configurable via the new 'Security options' configuration section. In addition to the new features, some versions of the patch contain various security fixes. The number of such fixes changes from version to version, as some are becoming obsolete (such as because of the same problem getting fixed with a new kernel release), while other security issues are discovered. Homepage here. By Solar Designer |
| linux-2.2.12-ow6.tar..> | 291 | 24545 | Oct 12 11:33:52 1999 |
| The Secure-Linux patch adds a few security features to the kernel which, while not a complete method of protection, will stop most of the 'cookbook' buffer overflow exploits cold. It also adds the option of restricting the use of symlinks in +t (temp) directories which fixes most tmp-race exploits as well. It can also add a little bit more privacy to the system by restricting access to parts of /proc to root so that users may not see who else is logged on or what they're doing. By Solar Designer |
| linux-2.2.13-ow1.tar..> | 288 | 19873 | Oct 27 13:53:38 1999 |
| This patch (for kernel version 2.2.13) is a collection of security-related features for the Linux kernel, all configurable via the new 'Security options' configuration section. In addition to the new features, some versions of the patch contain various security fixes. The number of such fixes changes from version to version, as some are becoming obsolete (such as because of the same problem getting fixed with a new kernel release), while other security issues are discovered. Homepage here. By Solar Designer |
| linux-2.2.14-ow1.tar..> | 331 | 21992 | Jan 7 17:37:44 2000 |
| This patch (for kernel version 2.2.14) is a collection of security-related features for the Linux kernel, all configurable via the new 'Security options' configuration section. Features a Non-executable user stack area, Restricted links in /tmp, Restricted FIFOs in /tmp, Restricted /proc, Special handling of fd 0, 1, and 2, Enforce RLIMIT_NPROC on execve(2), Destroy shared memory segments not in use, and Privileged IP aliases. Homepage here. By Solar Designer |
| linux-2.2.14-ow2.tar..> | 564 | 20899 | Feb 29 00:56:52 2000 |
| The Secure-Linux patch adds a few security features to the kernel which, while not a complete method of protection, will stop most of the 'cookbook' buffer overflow exploits cold. It also adds the option of restricting the use of symlinks in +t (temp) directories which fixes most tmp-race exploits as well. It can also add a little bit more privacy to the system by restricting access to parts of /proc to root so that users may not see who else is logged on or what they're doing. Changes: Now works on kernel 2.2.14! Homepage here. By Solar Designer |
| linux-2.2.14-stealth..> | 986 | 5565 | Feb 10 14:19:52 2000 |
| Patch for linux kernel 2.2.14 to discard packets that many OS detection tools use to query the TCP/IP stack. Changes: Patch3 actually works! Includes logging of the dropped query packets. Homepage here. By Sean Trifero |
| linux-2.2.14-stealth..> | 1163 | 7807 | Feb 11 12:40:37 2000 |
| Patch for linux kernel 2.2.14 to discard packets that many OS detection tools use to query the TCP/IP stack. Includes logging of the dropped query packets. Changes: Version 4 is handled by sysctl. Note that the kernel config options are now under networking. Homepage here. By Sean Trifero |
| linux-2.2.14-stealth..> | 722 | 14468 | Mar 1 13:26:27 2000 |
| Patch for linux kernel 2.2.14 to discard packets that many OS detection tools use to query the TCP/IP stack. Includes logging of the dropped query packets. Changes: Module support! Homepage here. By Sean Trifero |
| linux-2.2.14-stealth..> | 935 | 17717 | Mar 24 20:45:12 2000 |
| Patch for linux kernel 2.2.14 to discard packets that many OS detection tools use to query the TCP/IP stack. Includes logging of the dropped query packets. Changes: Version 7 has added module sysctl support, and now blocks res1 and res2 packets (bogus flags). Homepage here. By Sean Trifero |
| linux-2.2.15-ow1.tar..> | 558 | 23489 | May 7 15:19:35 2000 |
| The Secure-Linux patch adds a few security features to the kernel which, while not a complete method of protection, will stop most of the 'cookbook' buffer overflow exploits cold. It also adds the option of restricting the use of symlinks and named pipes in +t (temp) directories which fixes most tmp-race exploits as well. It can also add a little bit more privacy to the system by restricting access to parts of /proc to root so that users may not see who else is logged on or what they're doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction, and priveledged IP aliases for kernel 2.0. Changes: Now works on kernel 2.2.15! Readme available Homepage here. By Solar Designer |
| linux-2.2.16-ow1.tar..> | 917 | 23329 | Jul 7 23:49:12 2000 |
| The Secure-Linux patch adds a few security features to the kernel which, while not a complete method of protection, will stop most of the 'cookbook' buffer overflow exploits cold. It also adds the option of restricting the use of symlinks and named pipes in +t (temp) directories which fixes most tmp-race exploits as well. It can also add a little bit more privacy to the system by restricting access to parts of /proc to root so that users may not see who else is logged on or what they're doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction, and priveledged IP aliases for kernel 2.0. Changes: Now works on kernel 2.2.16! Readme available Homepage: http://www.openwall.com/linux. By Solar Designer |
| linux-2.2.16-stealth..> | 225 | 17368 | Jun 8 12:45:21 2000 |
| Patch for linux kernel 2.2.16 to discard packets that many OS detection tools use to query the TCP/IP stack. Includes logging of the dropped query packets and packets with bogus flags. Changes: Now works with kernel v2.2.16. Homepage: http://www.innu.org/~sean. By Sean Trifero |
| linux-2.3.99-pre5-se..> | 381 | 3719 | Apr 21 23:19:10 2000 |
| This is the securestackpatch by Openwall, ported for linux 2.3.99-pre5. There are no fancy configuration options, when you use this patch, next time you compile your kernel, the stack will be secure. By Karin |
| linux.klog.txt | 956 | 7004 | Feb 16 14:09:35 2000 |
| Patch for the linux kernel which may help you inexpensively deploy some packet loggers at key network ingress/egress points. Turns any Linux system into an ethernet logger that records mac address, ip address, ports and protocols with a timestamp in the system log. It can be activated and deactivated at the system console with two keystrokes. Homepage here. By DR |
| lsi_v1.0_RH.sh | 845 | 3328 | Jun 1 11:38:52 2000 |
| TSS v1.0beta1 is a shell script to check the local security of a Red Hat 6.0 / 6.1 / 6.2 machine. It checks for crontab, userhelper, shadow passwords, and the piranha account. Homepage here. By Grazer |
| medusa-0.6.3.tar.gz | 290 | 111820 | Nov 4 10:13:05 1999 |
| Medusa is a package, which improves overall security of Linux OS by extending standard Linux security architecture, but preserving backward compatibility. There is a small kernel patch and a user space security daemon. Homepage here. |
| medusa-0.7.10.tar.gz | 798 | 111625 | Feb 25 13:47:49 2000 |
| Medusa DS9 is used to increase Linux's security. It consists of two major parts, Linux kernel changes and the user-space daemon. Kernel changes do the monitoring of syscalls, filesystem actions, and processes, and they implement the communication protocol. The security daemon communicates with the kernel using the character device to send and receive packets. Changes: New features include ptrace handling, and an improved i386 entry.S offset generator, and automake support. Documentation fixes were made, and a bug in constable was fixed. Homepage here. By Marek Zelem and Martin Ockajak |
| medusa-0.7.9.tar.gz | 723 | 98825 | Feb 16 12:18:02 2000 |
| Medusa is a package which improves overall security of Linux OS by extending standard Linux security architecture, but preserving backward compatibility. There is a small kernel patch and a user space security daemon. Kernel changes do the monitoring of syscalls, filesystem actions, and processes, and they implement the communication protocol. The security daemon communicates with the kernel using the character device to send and receive packets. Changes: file hiding, new sample config file, and many documentation fixes and updates. Homepage here. By Marek Zelem and Martin Ockajak |
| motion | --- | 512 | Jun 23 17:10:14 2000 |
| Directory: motion uses a video4linux device as a motion detector, taking snapshots of the motion it sees. |
| motion-1.3.tar.gz | 136 | 38198 | Jun 28 19:00:26 2000 |
| motion uses a video4linux device as a motion detector. It will make snapshots of the movement it sees, making it usable as an observation or security system. It can send out email, SMS messages, or invoke an external command when detecting motion. Changes: Bug fixes, motion tracking with the mini_ssc library. A sensitivity mask and a minimum gap between snapshots was added. Homepage: http://motion.technolust.cx/. By Jeroen Vreeken |
| motion-1.4.tar.gz | 128 | 38491 | Jul 5 22:19:00 2000 |
| motion uses a video4linux device as a motion detector. It will make snapshots of the movement it sees, making it usable as an observation or security system. It can send out email, SMS messages, or invoke an external command when detecting motion. Changes: Can now be made to ignore sudden light changes, and a lightswitch filter was added. Homepage: http://motion.technolust.cx/. By Jeroen Vreeken |
| motion-1.5.tar.gz | 30 | 40537 | Aug 6 17:36:39 2000 |
| motion uses a video4linux device as a motion detector. It will make snapshots of the movement it sees, making it usable as an observation or security system. It can send out email, SMS messages, or invoke an external command when detecting motion. Changes: Support for feeding images to a video4linux loopback device was added. A division by zero bug was fixed. An "install" target was added to the Makefile. Homepage: http://motion.technolust.cx/. By Jeroen Vreeken |
| phantom_security-1.0..> | 429 | 221425 | Mar 10 16:46:47 2000 |
| GNU Phantom.Security is a computer-controlled security system. Using the software and a simple circuit board (schematics included) that you build, you can create a good basic security system that is computer controlled. The system can use off-the-shelf security devices like motion sensors, door magnets, and fire/smoke detectors with little to moderate modification. And if the machine the system is running on is connected to a LAN/WAN or the Internet, you can have it send e-mail. If you have a pager or cell phone capable of receiving e-mail, then you will have around the clock intrusion/fire detection for your home or office. Homepage here. By Joe Thielen |
| scandetect.tar.gz | 259 | 1531 | Jul 27 10:18:41 2000 |
| Scan Detect prevents attackers from running TCP port scanners against your Linux system by listening on a given TCP port and if any host on the internet connects to that TCP port, Scan Detect will use Ipchains to block that host completely. Homepage: http://personal.mia.bellsouth.net/mia/k/f/kf4dez. By Ryan Mann |
| stackshield0.7.tar.g..> | 924 | 17317 | Jan 7 14:42:41 2000 |
| Stack Shield - A "stack smashing" technique protection tool for Linux. The "stack smashing" technique is the most common way used in exploits to break the security of programs. Stack Shield is a tool for adding protection to programs from this kind of attacks at compile time whitout changing a line of code. Stack Shield uses a more secure protection system than other tool like Immunix Stack Guard. Stack Shield is designed to support the GCC under a Linux Intel 386 class platform. Homepage here. By Vendicator |
| StJude_LKM-0.01.tar...> | 450 | 13455 | Jul 10 11:48:56 2000 |
| Saint Jude LKM is a Linux Kernel Module for the 2.2.0 series of kernels. This module implements the Saint Jude model for improper privilege transitions. This will permit the discovery of local, and ultimately, remote root exploits during the exploit itself. Once discovered, Saint Jude will terminate the execution, preventing the root exploit from occuring. This is done without checking for attack signatures of known exploits, and thus should work for both known and unknown exploits. By Tim Lawless |
| StJude_LKM-0.02.tar...> | 316 | 13520 | Jul 29 10:10:26 2000 |
| Saint Jude LKM is a Linux Kernel Module for the 2.2.0 series of kernels. This module implements the Saint Jude model for improper privilege transitions. This will permit the discovery of local, and ultimately, remote root exploits during the exploit itself. Once discovered, Saint Jude will terminate the execution, preventing the root exploit from occuring. This is done without checking for attack signatures of known exploits, and thus should work for both known and unknown exploits. Changes: Fixed bug which would prevent the setreuid syscal from being restored upon exit. By Tim Lawless |
| StJude_LKM-0.03.tar...> | 363 | 23086 | Aug 11 08:40:24 2000 |
| Saint Jude LKM is a Linux Kernel Module for 2.2.11 and greater kernels. This module implements the Saint Jude model for improper privilege transitions. This will permit the discovery of local, and ultimately, remote root exploits during the exploit itself. Once discovered, Saint Jude will terminate the execution, preventing the root exploit from occuring. This is done without checking for attack signatures of known exploits, and thus should work for both known and unknown exploits. Changes: Support for SMP kernels, module-sealing is enabled, and a memory leak fix. By Tim Lawless |
| SuSEcompartment-0.5...> | 265 | 11745 | Jan 4 00:49:07 2000 |
| SuSE Compartment is a program to build secure compartments for running untrsted/insecure programs, and has got the usual uid/gid setting and chrooting abilitity, but the nice thing is the easy access to linux per process capabilities. Homepage here. By Marc |
| Sysctl.sh | 316 | 6357 | Jun 18 22:21:13 2000 |
| Using the sysctl support in linux to enhance a system security against outside attacks. Includes a script to optimize these settings by echoing values to /proc/sys/net/ipv4/*, turning on kernel security features which lessen the effect of SYN floods, smurf attacks, and turn on source validation by reversed path to add more protection against spoofed packets. Tested on linux 2.2.x. By Spender |
| virtualftpd.tgz | 151 | 74931 | Jul 24 12:37:32 2000 |
| Virtual FTPD v6.4 is a secure FTP daemon which is derived from the OpenBSD ftp daemon and can allows virtual FTP accounts which do not have an /etc/passwd entry. Homepage: http://startuplinux.com/software.html. By Michael Saarna |
 |
| |
| |
| Privacy Statement |
 |
| |
