UNIX for Advanced & Expert Users

One pesky person found a way to change the attributes back to make the file non immutable, any other more difficult ways to make this stop? I'm willing to try anything =)

Edit: posted before I was finished.

I can't think of any other way... The only thing you can do to keep root away from something is to try to obfuscate what you're doing... For example, a cron script that runs once a minute to check your file for changes, and change it back if needed. But that would be as easily defeated as the chattr trick...

If this person is root, they can do (and undo) whatever you can do...

Your user may be smart but try this. Maybe they won't catch it.

When they login to root, this will create a history file. You can chage the path of the HISTFILE so that it will not be in your / directory.



#############
# sets .sh_hist file to id of user

if [ "`tty`" = "/dev/console" ]
then
REAL=console
else
REAL=`logname`
fi


HISTFILE=/.sh_$REAL # or make some other directory than /
export HISTFILE
HISTSIZE=1000; export HISTSIZE

I edited /bin/login to not look for the motd in /etc/motd but instead in hidden file/directory =D

Thanks for all your help guys.

How did you modify /bin/login. isn't it a binary file?

I would like to see how you did that so I can utilize it. Also what OS are you using?

mandrake hrmm, not sure what version..

and yes it's a binary file.

just vi login

go to the the line with /etc/motd in it and edit it to a new path, but make sure the new path has as many characters in it as /etc/motd =)

Be careful though! If /bin/login gets corrupt, and no longer works, no one will see any MOTD, because no one will be able to log in.