Re: zk rootkit

From: Alexander V. Karelin (karelin_at_nonexisting.hamakor.org.il)
Date: Tue 08 Jun 2004 - 23:51:08 IDT


Bingo! Works like a charm! Thank You very much. I knew there was a way to
make files "undeletable", but wasn't sure where exactly did I read about
that. Thank You, again and again!

On Tue, 8 Jun 2004, Stanislav Malyshev wrote:

> AVK>> that I, for some strange reason, can not delete. Whenever I
> AVK>> try to change, delete, erase or do anything of the sort with
> AVK>> them - I get the "permission denied" error. Even if I do that
> AVK>> with my own removal code, writte from
>
> try chattr -i <filename>. They may have "immutable" attribute set, which
> prevents file from being deleted even by root. See man chattr. Of course,
> before that, if we talking about contaminated machine, verify that chattr
> is the original one :)
>

-- 
=================================================================
To unsubscribe, send mail to linux-il-request_at_linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request_at_linux.org.il


This archive was generated by hypermail 2.1.7 : Wed 09 Jun 2004 - 00:04:45 IDT