Re: aide or tripwire

From: rdicaire@ardynet.com
Date: 12/19/01


Date: Wed, 19 Dec 2001 17:55:54 -0500
From: rdicaire@ardynet.com
To: focus-linux@securityfocus.com

Rob 'Feztaa' Park wrote:

> Or you could just set the file(s) immuteable flag with 'chattr -i', and
> the file cannot be changed or deleted.

If it can be set, it can be unset. On a CDROM its on a read only
filesystem.