Re: ext3 hacked filesystem (by debian exim4 exploit) available foranalysis and bugreporting

From: Matthias Schniedermeyer
Date: Mon Jul 25 2011 - 09:53:52 EST


On 25.07.2011 13:08, Luke Kenneth Casson Leighton wrote:
> folks, hi,
>
> apart from anything, files which cannot be deleted (and cannot be
> detected as "corrupted" by fsck.ext3) is pretty damn serious.

You did try lsattr and checked that the files aren't 'immutable'?




Bis denn

--
Real Programmers consider "what you see is what you get" to be just as
bad a concept in Text Editors as it is in women. No, the Real Programmer
wants a "you asked for it, you got it" text editor -- complicated,
cryptic, powerful, unforgiving, dangerous.

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/