On Thu, Jan 03, 2002 at 08:37:57PM -0600, Mark Tinberg wrote:
> > The permissions on the filesystem are stripped to bare minimums,
> > and then chattr -i'd.
> 
> Remember to use something like LIDS to make the kernel and file attributes
> inviolate otherwise someone could just chattr +i your files, or access the
> raw device.

This isn't the first time I see this mistake showing up in this list:
o chattr -i *removes* the immutable bit, and thus it follows standard Unix
        permissions.
o chattr +i *sets* the immutable bit, and thus not even root may unlink
        or change it, unless the bit is reset.

Just a minor correction...

Regards,
Luciano Rocha

-- 
Luciano Rocha, [EMAIL PROTECTED]

The trouble with computers is that they do what you tell them, not what
you want.
                -- D. Cohen

Reply via email to