[Techtalk] undeletable files

Hamster hamster at hamsternet.org
Tue Mar 26 18:52:09 EST 2002


> System hacked.
> 
Hi,

Sorry not to answer your question as such, but I would recommend that a cracked system be wiped and reinstalled. 

You can never guarantee otherwise that you got all the "bad stuff" out.

Perhaps before you wipe it, save a copy of you /etc/ dir and that way you still have your config files that you can re-enter.

But to delete the undeletables, you might want to have a look at a util called chattr. Its possible to set a file attribute to "undeleteable", and you need chattr to change it back to deleteable. I think you can use another util called lsattr (or similar, my memory is not too good here) to list all files that are marked as non-deletable.

HTH

Hamster




More information about the Techtalk mailing list