4.3. What is a LIDS free session and how do I create one?

A LIDS free session (LFS) is a terminal session that is not restricted by LIDS. This option is available so you can administer your system without having to reboot into a non-LIDS kernel. In order for this to work, you must have selected this option when you compiled your LIDS enhanced kernel:

[*] Allow switching LIDS protections

To create an LFS, enter the following at the prompt:

bash# lidsadm -S -- -LIDS

You will then be prompted for your LIDS password. This terminal is now LIDS free. It will remain LIDS free until you:

• Enable LIDS again (lidsadm -S -- +LIDS).

• Log out of the terminal.

You can only have one LFS active at any one time. Even though lidsadm -S -- -LIDS will not fail if entered on another terminal, you can have only one LFS.