Re: User can delete root's file from user's home directory

You can make the file immutable with "chattr +i"



----- Original Message ----- 
From: "Imre" <jimbo@mailbox.hu>
To: <security-basics@securityfocus.com>
Sent: Thursday, October 28, 2004 7:29 AM
Subject: User can delete root's file from user's home directory


> Hello
>
> I have a big problem.
> On my system I have 2 users, root and a test-user named test.
> I made this:
> (as root, in /home/test)
> # touch testfile
> # echo probe > testfile
>
> After this I type 'ls -l' and get:
>
> test:/home/test# ls -l
> total 4
> -rw-r--r--    1 root     root            6 Oct 28 13:27 testfile
>
> OK, it's default, right?
>
> But my problem starts here:
>
> test@test:~$ ls -l
> total 4
> -rw-r--r--    1 root     root            6 Oct 28 13:27 testfile
> test@test:~$ rm testfile
> rm: remove write-protected file `testfile'? y
> teszt@teszt:~$ ls -l
> total 0
> teszt@teszt:~$
>
> I don't want to delete files and directories from my ~ which made by 
> root. Could anyone help me?
>
> (Sorry about my english, usually only read this language)
>
> Thanks
>
> Jimbo