Re: Hacked: .bash_history linked somewhere
Quoting Andreas Janssen <andreas.janssen@bigfoot.com>:
>> Maybe the file is immutable. Check with
>
> lsattr .bash_history
>
> You can use chattr to change it:
>
> chattr -i .bash_history
Yes, that was it. It had a bunch of those permissions set.
I chattr'd them all to off, and the file returned to normal.
Thank-you.
Still confused how the system was compromised to begin with.
Mike
-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/
Reply to: