Quoting Andreas Janssen <[EMAIL PROTECTED]>: >> Maybe the file is immutable. Check with > > lsattr .bash_history > > You can use chattr to change it: > > chattr -i .bash_history
Yes, that was it. It had a bunch of those permissions set. I chattr'd them all to off, and the file returned to normal. Thank-you. Still confused how the system was compromised to begin with. Mike ------------------------------------------------- This mail sent through IMP: http://horde.org/imp/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
