LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Something Changed File Permissions (https://www.linuxquestions.org/questions/linux-security-4/something-changed-file-permissions-81277/)

anthony114 08-12-2003 10:32 AM

Something Changed File Permissions
 
Hi,

I am running a Redhat version 9.

Something keeps changing the file permissions on the .gconfd directory (the GConf Configuration System) for the root and all user accounts. If I fix the permissions manually, everything is working fine. But if I logout and leave the machine running overnight, the next day the permissions are changed again (and GConf wouldn't work). This does not seem to happen after a reboot (so nothing is changing them at startup) or login (if I logout and then login back, everything is ok).

Could I have some kind of a utility installed that "fixes" permissions? Could that be a virus? Or did I get hacked? Does anyone have any ideas on what could that be?

Thanks a lot,

Anthony

bastard23 08-12-2003 05:12 PM

anthony114,

A cron script, probably. They usually run overnight as well. Look at /etc/cron* for the system cron jobs.

Have fun,
chris

unSpawn 08-12-2003 09:53 PM

If you don't want it changed anyhow, you could do "chattr =i -R .gconfd". "man chattr" for more info. Make sure you unset the bit before making any necessary changes tho.


All times are GMT -5. The time now is 03:40 PM.