Results 1 to 2 of 2
Thread: Is this bad security info?
Enjoy an ad free experience by logging in. Not a member yet? Register.
- Join Date
- Mar 2008
Is this bad security info?
/usr/bin/lsattr `echo $PATH | tr ':' ' '` | grep i--
would identify any files made immutable by a cracker because no files are shipped this way.
I ran it and have well over a hundred files in /usr/bin and /bin that have a message:
/usr/bin/lsattr: Operation not supported While reading flags on xxxxxxxx
Is the statement correct have I been cracked? Would a cracker really use chattr on that many files?
I'm a more than a bit suspicious of the statement read.
This is on a Slackware 13.0 system.