From owner-freebsd-security Sun Mar 5 13:44:44 2000 Delivered-To: freebsd-security@freebsd.org Received: from sasami.jurai.net (sasami.jurai.net [63.67.141.99]) by hub.freebsd.org (Postfix) with ESMTP id 3BAF537BB0F for ; Sun, 5 Mar 2000 13:44:38 -0800 (PST) (envelope-from scanner@jurai.net) Received: from localhost (scanner@localhost) by sasami.jurai.net (8.9.3/8.8.7) with ESMTP id QAA87411; Sun, 5 Mar 2000 16:44:36 -0500 (EST) Date: Sun, 5 Mar 2000 16:44:35 -0500 (EST) From: To: tom brown Cc: freebsd-security@FreeBSD.ORG Subject: Re: strange file ! In-Reply-To: <38C2D154.C7E670B@cgf.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sun, 5 Mar 2000, tom brown wrote: > I can't remove this one file > c---r-S--x 1 2633515 2895918 38, 0x00210020 Jan 28 1970 i386 > > Now although it might be uneraseable for a reason, I expect to be able > to erase anything as root. The only ime root shouldnt be able to delete a file is if its had chflg with "schg" appended to it. Meaning not even root can rm it. do ls -lo on the file in question if it looks like this: -r-xr-xr-x 1 root wheel schg 1257406 Feb 21 21:24 /kernel Notice the 4rd field "schg" it cant be rm'ed. You must use chflag to remove it. "chflag noschg filename" Then rm it. ============================================================================= -Chris Watson (316) 326-3862 | FreeBSD Consultant, FreeBSD Geek Work: scanner@jurai.net | Open Systems Inc., Wellington, Kansas Home: scanner@deceptively.shady.org | http://open-systems.net ============================================================================= WINDOWS: "Where do you want to go today?" LINUX: "Where do you want to go tommorow?" BSD: "Are you guys coming or what?" ============================================================================= To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message