Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 5 Mar 2000 16:44:35 -0500 (EST)
From:      <scanner@jurai.net>
To:        tom brown <tomb@cgf.net>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: strange file !
Message-ID:  <Pine.BSF.4.21.0003051639450.87304-100000@sasami.jurai.net>
In-Reply-To: <38C2D154.C7E670B@cgf.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 5 Mar 2000, tom brown wrote:

> I can't remove this one file
> c---r-S--x  1 2633515  2895918   38, 0x00210020 Jan 28  1970 i386
> 
> Now although it might be uneraseable for a reason, I expect to be able
> to erase anything as root.

The only ime root shouldnt be able to delete a file is if its had chflg
with "schg" appended to it. Meaning not even root can rm it. do ls -lo on
the file in question if it looks like this:

-r-xr-xr-x  1 root  wheel  schg 1257406 Feb 21 21:24 /kernel

Notice the 4rd field "schg" it cant be rm'ed. You must use chflag to
remove it. "chflag noschg filename" Then rm it.

=============================================================================
-Chris Watson         (316) 326-3862 | FreeBSD Consultant, FreeBSD Geek 
Work:              scanner@jurai.net | Open Systems Inc., Wellington, Kansas
Home:  scanner@deceptively.shady.org | http://open-systems.net
=============================================================================
WINDOWS: "Where do you want to go today?"
LINUX: "Where do you want to go tommorow?"
BSD: "Are you guys coming or what?"
=============================================================================



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0003051639450.87304-100000>