chattr certain dirs on Debian? (was Re: rm: cannot unlink `sendmail': Operation not permitted)

2002-05-23 Thread Jason Lim
Nope... it wasn't running.

I did a "chattr = sendmail" to remove all flags, and now it works.

[EMAIL PROTECTED] sbin]# lsattr |more
suSiadAc-- ./iconvconfig
suSiadAc-- ./rpcinfo
suSiadAc-- ./zdump
suSiadAc-- ./zic
suSiadAc-- ./pwunconv
suSiadAc-- ./pwck
suSiadAc-- ./glibc_post_upgrade
suSiadAc-- ./mklost+found
suSiadAc-- ./arping
suSiadAc-- ./clockdiff
suSiadAc-- ./ping6

Redhat 7.2 has these by default.

Despite the trouble it caused me earlier, perhaps this is a *GOOD*
thing... it would prevent root from accidentally deleting any critical
system files, and would make hacking/cracking slightly harder (okay...
only slightly, but hey... everything adds up to help).


On a Debian system:
sh-2.05a# lsattr /usr/sbin
-- /usr/sbin/locale-gen
-- /usr/sbin/dpkg-preconfigure
-- /usr/sbin/vchkpw
-- /usr/sbin/dpkg-reconfigure


Would this be something we want to do on Debian?

Sincerely,
Jason

- Original Message -
From: "John Gonzalez/netMDC admin" <[EMAIL PROTECTED]>
To: "Jason Lim" <[EMAIL PROTECTED]>
Sent: Friday, May 24, 2002 8:22 AM
Subject: Re: rm: cannot unlink `sendmail': Operation not permitted


> Is sendmail running?
>
> Do a: ps auxww | grep sendmail
>
> On Fri, May 24, 2002 at 08:16:25AM +1000, Jason Lim wrote:
> > Hi all,
> >
> > This is happening on a Redhat 7.2 system, but i think it would apply
> > across all Linux distros.
> >
> > [EMAIL PROTECTED] sbin]# pwd
> > /usr/sbin
> > [EMAIL PROTECTED] sbin]# chattr -iu sendmail
> > [EMAIL PROTECTED] sbin]# rm sendmail
> > rm: remove `sendmail'? y
> > rm: cannot unlink `sendmail': Operation not permitted
>
> --
> John Gonzalez, Tularosa Communications | (505) 439-0200 work
> JG6416, ASN 11711, [EMAIL PROTECTED]  | (505) 443-1228 fax
>   http://www.tularosa.net
>



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




chattr certain dirs on Debian? (was Re: rm: cannot unlink `sendmail': Operation not permitted)

2002-05-23 Thread Jason Lim

Nope... it wasn't running.

I did a "chattr = sendmail" to remove all flags, and now it works.

[root@linux1 sbin]# lsattr |more
suSiadAc-- ./iconvconfig
suSiadAc-- ./rpcinfo
suSiadAc-- ./zdump
suSiadAc-- ./zic
suSiadAc-- ./pwunconv
suSiadAc-- ./pwck
suSiadAc-- ./glibc_post_upgrade
suSiadAc-- ./mklost+found
suSiadAc-- ./arping
suSiadAc-- ./clockdiff
suSiadAc-- ./ping6

Redhat 7.2 has these by default.

Despite the trouble it caused me earlier, perhaps this is a *GOOD*
thing... it would prevent root from accidentally deleting any critical
system files, and would make hacking/cracking slightly harder (okay...
only slightly, but hey... everything adds up to help).


On a Debian system:
sh-2.05a# lsattr /usr/sbin
-- /usr/sbin/locale-gen
-- /usr/sbin/dpkg-preconfigure
-- /usr/sbin/vchkpw
-- /usr/sbin/dpkg-reconfigure


Would this be something we want to do on Debian?

Sincerely,
Jason

- Original Message -
From: "John Gonzalez/netMDC admin" <[EMAIL PROTECTED]>
To: "Jason Lim" <[EMAIL PROTECTED]>
Sent: Friday, May 24, 2002 8:22 AM
Subject: Re: rm: cannot unlink `sendmail': Operation not permitted


> Is sendmail running?
>
> Do a: ps auxww | grep sendmail
>
> On Fri, May 24, 2002 at 08:16:25AM +1000, Jason Lim wrote:
> > Hi all,
> >
> > This is happening on a Redhat 7.2 system, but i think it would apply
> > across all Linux distros.
> >
> > [root@linux1 sbin]# pwd
> > /usr/sbin
> > [root@linux1 sbin]# chattr -iu sendmail
> > [root@linux1 sbin]# rm sendmail
> > rm: remove `sendmail'? y
> > rm: cannot unlink `sendmail': Operation not permitted
>
> --
> John Gonzalez, Tularosa Communications | (505) 439-0200 work
> JG6416, ASN 11711, [EMAIL PROTECTED]  | (505) 443-1228 fax
>   http://www.tularosa.net
>



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]