[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: utterly unremoveable file



on Sun, May 04, 2003 at 07:41:31AM -0400, Rick Pasotto (rick@niof.net) wrote:
> On Sun, May 04, 2003 at 03:25:33PM +0800, Robert Storey wrote:
> > On Sun, 4 May 2003 02:19:45 -0400 Rick Pasotto <rick@niof.net> wrote:
> > 
> > > How is it possible to create (actually I want to know how to remove)
> > > a seemingly unremoveable file. Even when logged in as root and with
> > > the file system mounted on a different mount point *nothing* seems
> > > to get rid of it. Not 'rm', not 'mv', not 'cat /dev/null >', not
> > > chown, not chmod. I can tar the directory and then untar it
> > > elsewhere, remove the file from that directory, create a new tar
> > > file, rename the original directory and untar the new tar file but I
> > > can't remove the old directory since it still contains the offending
> > > file.
> > 
> > Possibly the file has been made "immutable" with the chattr command.
> > To find out, try the lsattr command:
> > 
> >   lsattr filename
> > 
> > If it has an "i" (immutable) flag, you can remove it:
> > 
> >   chattr -i filename
> > 
> > You might have to be root to do this, especially on a journaled
> > filesystem. See "man chattr" and "man lsattr".
> 
> Thanks, that was the problem -- except that the file also had the 'u'
> and the 'a' bits set.

Curious.  You might want to check that it wasn't maliciously created,
just to be sure.

Peace.

-- 
Karsten M. Self <kmself@ix.netcom.com>        http://kmself.home.netcom.com/
 What Part of "Gestalt" don't you understand?
   Verio webhosting?  Guaranteed downtime:
     http://www.wired.com/news/politics/0,1283,57011,00.html
     http://www.dowethics.com/r/environment/freedom.html



Reply to: