Security Incidents mailing list archives

RE: Machine compromised

From: dlaumann () suntzu net
Date: Wed, 9 Jan 2002 15:44:40 -0600

But now for the question. I can't seem to do anything to 
/usr/bin/ssh2d and
/etc/rc.d/init.d/network. I can't remove, move, changes 
permissions on it in
any way.


prolly immutable attribute
man lsattr
man chattr

chattr -i <file>

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Current thread:

Machine compromised Jan van Rensburg (Jan 09)
- Re: Machine compromised Gamble (Jan 09)
- Re: Machine compromised Petrus Repo (Jan 09)
- <Possible follow-ups>
- RE: Machine compromised dlaumann (Jan 09)
- Re: Machine compromised Jan van Rensburg (Jan 15)