Linux Intrusion Detection System FAQ
PrevChapter 4. LIDS AdministrationNext

4.13. Can I enable/disable a system capability without modifying /etc/lids/lids.cap and reloading the configuration files?

Yes. However, this method will not save the changes past system shutdown. To enable a capability: 
bash# lidsadm -S -- +CAP_SYS_ADMIN
To disable a capability: 
bash# lidsadm -S -- -CAP_SYS_ADMIN

PrevHomeNext
What are the subject and object in a LIDS ACL?UpI've reconfigured my LIDS ACLs, but my changes don't seem to take effect. What's wrong?