Re: Really persistant symbolic link problem

[David Brewster]

One other thing. The rootkit changes file attributes so rpm reinstall fails.
If you do "lsattr /bin/ls" or top or whatever then I think the attributes will
have probably been changed to prevent deletion. You can do

chattr -<letter of attribute set> /hacked/file

to remove the attributes then after that the reinstall of your rpm should
work ok. 

David



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list