But when the hole is disclose to the public, and the administrator is too lazy to patch the hole. It is very easy to break into the un-patched system and it is worse that the hacker can get the root shell. This is the problem that LIDS want to solve. File System is unprotected. But the files do not need to change frequently, unless you want to upgrade the system.
Process is unprotected.
As a web server system, it is very important to protect the process from illegal terminated. But we can not do anything is the intruder get the root privilege. System administration is unprotected. It is unsafe when the intruder getting root privilege. Even the capability existing in the current the system.