[olug] lsattr
Mike McNally
mmcnally3 at prodigy.net
Sat Sep 16 06:28:02 UTC 2000
I found 3 immutable files in the mutt/charsets dir. Now if these are
scripts added by crackers, I don't see how changing them to no longer be
immutable will fix my system. The scripts will still be there. I'll do
a google search on immutable tomorrow am and see what I can find.
Thanks for tips, Brian and Dan.
mike
Daniel Pfile wrote:
>
> ahh yes, a common way for script kiddie hacker d00ds to hide files
>
> the way i first found out about it's use was when i noticed locate will
> index files hidden by chatter...
>
> very usefull command to run on a regular basis tho
>
> | Daniel Pfile | I'm too cool for a signature |
> | pfiled at marietta.edu | |
>
> On Mon, 11 Sep 2000, Brian Roberson wrote:
>
> >
> > I am sure someone will thank me later....
> >
> >
> >
> > lsattr -R / | grep "\-i\-"
> >
> > anything show up beside's the error's in /dev/ and /proc/ ??
> >
> >
> > better look deeper then!!
> >
> > `man chattr`
> >
> > or the shortway:
> >
> > chattr -i ${AFFECTED_FILE}
> >
> >
> >
> >
> >
> > -_-_-_-_-_-_
> > Brian Roberson
> > brian at bstc.net
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: olug-unsubscribe at bstc.net
> > For additional commands, e-mail: olug-help at bstc.net
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: olug-unsubscribe at bstc.net
> For additional commands, e-mail: olug-help at bstc.net
---------------------------------------------------------------------
To unsubscribe, e-mail: olug-unsubscribe at bstc.net
For additional commands, e-mail: olug-help at bstc.net
More information about the OLUG
mailing list