From owner-freebsd-stable@FreeBSD.ORG Wed Feb 3 12:33:18 2010 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4C63F106568D for ; Wed, 3 Feb 2010 12:33:18 +0000 (UTC) (envelope-from jespasac@minibofh.org) Received: from xen-smtp03.cdmon.com (rbl.cdmon.com [212.36.74.233]) by mx1.freebsd.org (Postfix) with ESMTP id 0E6638FC19 for ; Wed, 3 Feb 2010 12:33:17 +0000 (UTC) Received: from jespasac.cdmon.com (62.Red-217-126-43.staticIP.rima-tde.net [217.126.43.62]) (Authenticated sender: jespasac@noverificar) by xen-smtp03.cdmon.com (Postfix) with ESMTPA id C115A7C200; Wed, 3 Feb 2010 13:33:15 +0100 (CET) Message-ID: <4B696D0B.3070301@minibofh.org> Date: Wed, 03 Feb 2010 13:33:15 +0100 From: Jordi Espasa Clofent User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.5) Gecko/20091209 Fedora/3.0-4.fc12 Lightning/1.0b1 Thunderbird/3.0 MIME-Version: 1.0 To: freebsd-stable@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Subject: Inmutable bit in some binaries X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Feb 2010 12:33:18 -0000 HI all, I'm hardening one test box and at present I'm planning to do: # chflags -R schg where will be some binaries that seems to be common targets for rootkits and lammers: ls du ps find top locate strings ifconfig netstat login I wonder if changing these files permissions as I've shown above will be cause some troubles in future upgrade (recompilation, the classic way, not the binary upgrade one) process. żIt will? -- I must not fear. Fear is the mind-killer. Fear is the little-death that brings total obliteration. I will face my fear. I will permit it to pass over me and through me. And when it has gone past I will turn the inner eye to see its path. Where the fear has gone there will be nothing. Only I will remain. Bene Gesserit Litany Against Fear.