-   Linux - Security (
-   -   Something Changed File Permissions (

anthony114 08-12-2003 10:32 AM

Something Changed File Permissions

I am running a Redhat version 9.

Something keeps changing the file permissions on the .gconfd directory (the GConf Configuration System) for the root and all user accounts. If I fix the permissions manually, everything is working fine. But if I logout and leave the machine running overnight, the next day the permissions are changed again (and GConf wouldn't work). This does not seem to happen after a reboot (so nothing is changing them at startup) or login (if I logout and then login back, everything is ok).

Could I have some kind of a utility installed that "fixes" permissions? Could that be a virus? Or did I get hacked? Does anyone have any ideas on what could that be?

Thanks a lot,


bastard23 08-12-2003 05:12 PM


A cron script, probably. They usually run overnight as well. Look at /etc/cron* for the system cron jobs.

Have fun,

unSpawn 08-12-2003 09:53 PM

If you don't want it changed anyhow, you could do "chattr =i -R .gconfd". "man chattr" for more info. Make sure you unset the bit before making any necessary changes tho.

All times are GMT -5. The time now is 03:40 PM.