Link to home
Start Free TrialLog in
Avatar of illu666
illu666

asked on

read only /bin

Ok. I had a rootkit on a debian sarge.

it set /bin readonly so i cannot substitute infected binaries

how do i setattr /bin (and /sbin) other than formatting?
ASKER CERTIFIED SOLUTION
Avatar of SirGeeks
SirGeeks

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of illu666
illu666

ASKER

it worked: i had to set the directory attributes too. (and give a "-a" too to overwrite infected files)

thank you!