05-21-2012
Years and years ago I worked for a small ISP (Internet Service Provider) that offered Unix (SunOS) shell accounts. In order to prevent the installation of rootkits and such, we would read-only mount as many partitions as possible, including /usr and /sbin. Not only were they mounted read-only, but they were mounted from a separate disk drive that was set via a jumper to be read-only! (Actually, we carefully soldered wires to the pins and ran them to a switch, so that we could install software updates w/o disassembling the box.)
A couple of times over the decade or so that I worked there we had someone who (as best as I could tell) got a root shell, tried to install some kind of rootkit/backdoor, found that the executables they wanted to over-write were in a r/o partition, edited the fstab to mount the partition read-write, and rebooted in the hopes of (I assume) logging in again with the ability to over-write stuff. The r/o drive would make the box cyclicly reboot until we found it.
In various log files I'd see the error you list in your initial post. If you aren't the admin for the machine you need to consult with that person.
10 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
Hi,
I have a file xyz.txt, which contains several "tar.gz" package names
Eg :-
Now i need to execute an rpm - ivh against all those packages in this file through a script one by one.
I need a script to read through the file "xyz.txt", pick up each package name and execute rpm -ivh... (7 Replies)
Discussion started by: systemali
7 Replies
2. UNIX for Dummies Questions & Answers
Hi,
Has any one worked on IPSO operating system.
I have a to add a file to /etc directory.
When I create a file it comes up with read only file system.
Is there any way of adding a file to this directory,
without changing the etc directory parameters.
Br,
Eugene (1 Reply)
Discussion started by: eugene777
1 Replies
3. UNIX for Dummies Questions & Answers
I have a Netra T1 server running Solaris 8, It was installed by jump start, it does not have a cdrom drive.
Recetly it crashed so I rebooted it from >LOM poweron
and it came to run level 3, all file systems listed in /etc/vfstab are mounted, but /dev and / root are not writeable though in... (3 Replies)
Discussion started by: Tirmazi
3 Replies
4. SCO
After System power get failed
File system is not getting mounted in read- write mode (1 Reply)
Discussion started by: gtkpmbpl
1 Replies
5. SCO
hi
Knows someone what kind of file system uses SCO Unix 5.0.6?
Which linux or unix LIVE CD can read and write into file system from SCO Unix?
I've tried to boot SCO using Knoppix 6.2.1 LIVE CD, but cannot mount.
# mount -t sysv /dev/sda1 /mnt
mount: wrong fs type, bad option, bad superblock... (2 Replies)
Discussion started by: ccc
2 Replies
6. Infrastructure Monitoring
hi 2 all
i installed nagios in my linux srvr . check_ftp file is in format of system format .
i wants to see the syntax for that script
how can i read that file .. ???
please help me ! (4 Replies)
Discussion started by: ponmuthu
4 Replies
7. OS X (Apple)
My first post :)
I deleted all the files within /system/library/startupitems to the trash bin. Now my mac snow leopard won't boot at all. All I got is the gray screen, apple logo and the spinning wheel...just spinning forever. I was able to boot in single-user mode. I'm trying to copy cp command... (14 Replies)
Discussion started by: haxum
14 Replies
8. Red Hat
I have a test system, user which I have my home directory.
/home/hansini
The files under this directory show as
?--------- ? ? ? ? ? sam.sh
?--------- ? ? ? ? ? DDD
I know on the test system OS is corrupt and it is read only file system.
If I go to some other... (2 Replies)
Discussion started by: hansini
2 Replies
9. UNIX for Dummies Questions & Answers
I have a file on a usb stick which I cannot remove and the following error message shows:
rm: cannot remove `file-name': Read-only file system
The usb stick is mounted as read-only on an Ubuntu system:
$ mount
/dev/sda1 on / type ext4 (rw,errors=remount-ro)
proc on /proc type proc (rw)
none... (4 Replies)
Discussion started by: figaro
4 Replies
10. Solaris
root@atrcx146:/# vi /etc/system
"/var/tmp/Exv9a4Rb" Read-only file system
Please let me know the reason (1 Reply)
Discussion started by: Marty11
1 Replies
FSTAB(5) File Formats Manual FSTAB(5)
NAME
fstab, mtab - list of file systems to mount, mounted file system table.
SYNOPSIS
/etc/fstab
/etc/mtab
DESCRIPTION
/etc/fstab is a table of file system to mount at boot time, /etc/mtab is a table of currently mounted file systems as maintained by mount
and umount.
/etc/fstab is not read by mount as it should be. It is instead a simple shell script listing the three devices that Minix needs to oper-
ate: The device names of the root file system, the temporary (scratch) file system, and the file system for /usr. Of these only the /usr
file system is mounted in /etc/rc, the scratch file system is there for the system administrator to test new kernels, or as a temporary
file system.
/etc/mtab contains lines of four fields. The layout is:
device directory type options
These fields may be explained as follows:
device
A block special device.
directory
Mount point.
type
Either 1, or 2, indicating a V1 or V2 file system.
options
Either ro, or rw, indicating a read-only or read-write mounted file system.
FILES
/etc/fstab Shell script naming three important file systems.
/etc/mtab List of mounted file systems.
SEE ALSO
printroot(8), mount(1), fsck(1), mkfs(1).
BUGS
/etc/fstab is a joke.
AUTHOR
Kees J. Bot (kjb@cs.vu.nl)
FSTAB(5)