Hi All,
Some ******* **** **** ***** got into one of our
systems and did the script kiddie root kit deal. This
one was a little special, though -- I can't delete or
move files they've replaced even from rescue disks.
I know a long time ago I read about a command which
edited extended file attributes held by the ext2 file
system.. I think they may have used it to prevent me
from deleting their crap. Can anyone name that tool?
:-) And/or any other goodies they may be using to
prevent me from deleting their files?
I know, I know, I need to wipe the box clean, but
until then I need to limp along with a repaired
system; assuming I can delete the files to re-install
the RPM's! :-)
Thanks in advance.
Adrian.
__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - Buy the things you want at great prices.
http://auctions.yahoo.com/
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
