Subject: Re: login: Permission denied
To: Bill Studenmund <skippy@macro.Stanford.EDU>
From: Josh Hope <otaku@unixborg.net>
List: port-i386
Date: 04/20/1999 20:47:33
Hey Bill!

>How about ls -lo /home ?

Ah, it still shows none of the directories as having that flag set, 
unfortunately. (At this point in time I'd just like to identify the 
problem so it can be corrected!)

>The immutable flag is one of a set of flags which can be set for a file.
>It makes a file read-only. If the super-user variant is set, even the
>super user can't change a file. There are also append-only flags.
>
>These flags apply when the system is running multi-user (securelevel > 0),
>and can't be changed at that time. So a production machine can set
>the append-only flag on its logs, and the immutable flag on certain
>binaries. Then even if an attacker gets root access, they can't change the
>logs or programs. Of course to change these files requires dropping to
>single-user. :-)

Thanks for the info and your help.

>Take care,
>
>Bill

-- Josh Hope