LIDS-only Capabilities
  CAP_HIDDEN
  Hide process from /proc (ps, pstree, lsof, etc).
  CAP_PROTECTED
  Ignore any signals from normal userland processes.
  CAP_KILL_PROTECTED
  Ability to send signals to CAP_PROTECTED processes.

Copyright 2003, Bri Hatch of Onsight, Inc.

Presented at ISSA Puget Sound, 2003.

Presentation created using vim and MagicPoint.