File System is unprotected. But the files do not need to change frequently, unless you want to upgrade the system. Process is unprotected. As a web server system, it is very important to protect the process from illegal terminated. But we can not do anything is the intruder get the root privilege.
System administration is unprotected.
It is unsafe when the intruder getting root privilege. Even the capability existing in the current the system. As a root, he can easily change the capability. At summary, we can see that the access control model in the current Linux system is not enough for building a secure Linux system. This is what LIDS do.