Re: Rooted? Could anything innocently alter the "i" flag?
> Things seem to be getting worse. I originally discovered the problem
> because a routine upgrade of procps failed because it could not make a
> link to /bin/ps. I eventually found that it was due to the "i" flag on
> that file. I removed the flag and it then worked. However, last night I
> found that the flag had returned. I removed it again.
>
> Today, I found that upgrading procps failed again, this time because it
> was unable to create /bin/kill. But /bin/kill does not have the "i" flag
> set. So it definitely seems that something strange is happening.
Anthony, try using grep -r to find out if there's some ordinary boot or cron
script that's doing this stuff. For example,
grep -r chattr /etc
Reply to: