Securing Debian Manual: 4.10.9.2 Using the shell history file

[Stayvoid <stayvoid@gmail.com>]

Hello.

"Note that you could introduce the configuration above in the user's
.profile. But then you would need to setup permissions properly in
such a way that prevents the user from modifying this file. This
includes: having the user's home directories not belong to the user
(since he would be able to remove the file otherwise) but at the same
time enable them to read the .profile configuration file and write on
the .bash_history. It would be good to set the immutable flag (also
using chattr) for .profile too if you do it this way."
How to make this?

http://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html

Cheers