[plug] Trying to delete a file

[Andrew Barbara]

Don't worry 
I found the tool!!!
it is chattr and lsattr.

Thanks anyway.

Andrew


On Thu, 27 Feb 2003, Andrew Barbara wrote:

> Hi All,
> I was upgrading a xinetd on redhat 7.3 box last night and i came up to a 
> brick wall, RPM failed because it could not rename the file 
> /etc/init.d/xinetd
> so i went and tried to delete/rename the file, i cant even edit it!
> 
> the ls output is:
> 
> [root at server init.d]# ls -sal xinetd
>    4 -rwxr-xr-x    1 root     root         1617 Aug 27  2002 xinetd
> [root at server init.d]#
> 
> so as you can see i have access to it, (Being root and all)
> is there any more file permissions anywhere else?
> I remember when cleaning a root kit off someones server we needed to 
> remove some extra securities.
> 
> The error when i try and remove the rile is:
> 
> [root at server init.d]# rm xinetd
> rm: remove write-protected file `xinetd'? y
> rm: cannot unlink `xinetd': Operation not permitted
> [root at server init.d]#
> 
> Thanks
> 
>