On 2017-10-24, Roberto C Sánchez <robe...@debian.org> wrote: >> >> If it's a SYMLINK and you made the symlink immutable, well, that would >> explain a whole lot. > > It is not a symlink: > > debian:/etc# ls -l --full-time /etc/resolv.conf > -rw-r--r-- 1 root root 25 2017-10-24 07:07:54.513938427 -0400 /etc/resolv.conf > debian:/etc# file /etc/resolv.conf > /etc/resolv.conf: ASCII text
Of course you're certain the file indeed has the immutable attribute (lsattr) set, in which case I wonder vaguely to myself how it could be possible for the file to have been subsequently modified. The plot sickens. > Regards, > > -Roberto > -- "A simpering Bambi narcissist and a thieving, fanatical Albanian dwarf." Christopher Hitchens, commenting shortly after the nearly concurrent deaths of Lady Diana and Mother Theresa.