Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 4 Dec 2007 01:50:47 +0800
From:      "Anjang Aki" <mailman.msc@gmail.com>
To:        "Michael Proto" <mike@jellydonut.org>
Cc:        freebsd-stable@freebsd.org
Subject:   Re: FreeBSD 6.3-PRERELEASE unable to change file permission
Message-ID:  <bcd996c30712030950q465ca7a9h2f2b05f7ef618c28@mail.gmail.com>
In-Reply-To: <47543008.7040902@jellydonut.org>
References:  <bcd996c30712030759w39bb29fbje5d0169436565f3b@mail.gmail.com> <47543008.7040902@jellydonut.org>

next in thread | previous in thread | raw e-mail | index | archive | help
i just got the answer..
i need to run init 1 and do chflags -R 0 /usr/bin/rlogin and then i
can change the file permission using chmod

thanks for your advice

On 12/4/07, Michael Proto <mike@jellydonut.org> wrote:
> Anjang Aki wrote:
> > hi!.. i'm not able to change file permission to disable rlogin and
> > login on my box even as root
> >
> > # ls -lo /usr/bin/login /usr/bin/rlogin
> > -r-sr-xr-x  1 root  wheel  schg 19996 Dec  1 13:04 /usr/bin/login
> > -r-sr-xr-x  1 root  wheel  schg 10140 Dec  1 13:04 /usr/bin/rlogin
> >
> > # chflags -R nouchg login rlogin
> > chflags: /usr/bin/login: Operation not permitted
> > chflags: /usr/bin/rlogin: Operation not permitted
> >
> > # chmod a=rx /usr/bin/login /usr/bin/rlogin
> > chmod: /usr/bin/login: Operation not permitted
> > chmod: /usr/bin/rlogin: Operation not permitted
> >
> > it makes me uneasy as my users can still use login and rlogin to gain
> > access to the box
> >
> > my system:
> > # uname -a
> > FreeBSD k3.college.edu 6.3-PRERELEASE FreeBSD 6.3-PRERELEASE #1: Sun
> > Dec  2 18:51:02 MYT 2007     root@college.edu:/usr/obj/usr/src/sys/EDU
> >  i386
> >
> > thanks for advice
> >
>
> It looks like these files have the system-immutable flags set (schg),
> not the user-immutable (uchg). What happens if you do "chflags noschg
> /usr/bin/login /usr/bin/rlogin"?
>
>
> -Proto
>


-- 
-- Anjang Aki --



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bcd996c30712030950q465ca7a9h2f2b05f7ef618c28>