Date: Mon, 03 Dec 2007 11:34:16 -0500 From: Michael Proto <mike@jellydonut.org> To: Anjang Aki <mailman.msc@gmail.com> Cc: freebsd-stable@freebsd.org Subject: Re: FreeBSD 6.3-PRERELEASE unable to change file permission Message-ID: <47543008.7040902@jellydonut.org> In-Reply-To: <bcd996c30712030759w39bb29fbje5d0169436565f3b@mail.gmail.com> References: <bcd996c30712030759w39bb29fbje5d0169436565f3b@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Anjang Aki wrote: > hi!.. i'm not able to change file permission to disable rlogin and > login on my box even as root > > # ls -lo /usr/bin/login /usr/bin/rlogin > -r-sr-xr-x 1 root wheel schg 19996 Dec 1 13:04 /usr/bin/login > -r-sr-xr-x 1 root wheel schg 10140 Dec 1 13:04 /usr/bin/rlogin > > # chflags -R nouchg login rlogin > chflags: /usr/bin/login: Operation not permitted > chflags: /usr/bin/rlogin: Operation not permitted > > # chmod a=rx /usr/bin/login /usr/bin/rlogin > chmod: /usr/bin/login: Operation not permitted > chmod: /usr/bin/rlogin: Operation not permitted > > it makes me uneasy as my users can still use login and rlogin to gain > access to the box > > my system: > # uname -a > FreeBSD k3.college.edu 6.3-PRERELEASE FreeBSD 6.3-PRERELEASE #1: Sun > Dec 2 18:51:02 MYT 2007 root@college.edu:/usr/obj/usr/src/sys/EDU > i386 > > thanks for advice > It looks like these files have the system-immutable flags set (schg), not the user-immutable (uchg). What happens if you do "chflags noschg /usr/bin/login /usr/bin/rlogin"? -Proto
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?47543008.7040902>