Wardriving Ubuntu & /etc/resolv.conf

[Jim Richardson]

On Sun, 2005-03-13 at 15:25 +0100, Hans Poppe wrote:
> Joe Potter wrote:
> 
> > Hans Poppe wrote:
> >> Joe Potter wrote:
> >> 
> >> 
> >>>Hans Poppe wrote:
> > 
> > 
> > <snip>
> >> 
> >> Hi,
> >> I tried this and the output from lsattr /etc/resolv.conf reads
> >> "-------i------------" (didn't count the hashes :-), but it is still
> >> overwritten if I run dhclient. I suppose that means that when the lease
> >> is to be renewed my machine will run dhclient, and it will be overwritten
> >> again. Haven't had the chance to try yet, but my neighbours unsecured
> >> WiFi lets me on the net, and it gives me a real IP for the NS, not an NAT
> >> address. However this DHCP doesn'æt require a renewal for days, so I'll
> >> have to wait to see...
> >> 
> >> Hans
> >> 
> >> 
> > 
> > If the "i" attribute is set as you show with the lsattr listing, then
> > even root is not suppose to be able to modify the file. You may not
> > change it or remove it.
> > 
> > 
> > Re-check that the "i" is still set, and then try to modify the file with
> > an editor. You should not be able to do so.
> > 
> > Or, try to remove it.
> > 
> > Let me know what happens.
> > 
> > Regards, Joe
> I ran lasattr on resolv.conf and it had an "i".
> This is strange, I tried to edit the file in a root terminal and I could.
> However lsattr shows that after editing the "i" is gone and the changes to
> the file are there. I can set the "i" again, but if I can change it as root
> any program running in sudo mode could as well??
> Regards, Hans
> 


Is this a reiserfs file system? Reiserfs will report attr, but does not
actually  implement them as of yet. (IIRC)

> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20050315/739b3369/attachment.sig>