From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752075Ab1GYNxt (ORCPT ); Mon, 25 Jul 2011 09:53:49 -0400 Received: from enyo.dsw2k3.info ([195.71.86.239]:45633 "EHLO enyo.dsw2k3.info" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751957Ab1GYNxq (ORCPT ); Mon, 25 Jul 2011 09:53:46 -0400 X-Greylist: delayed 475 seconds by postgrey-1.27 at vger.kernel.org; Mon, 25 Jul 2011 09:53:46 EDT Date: Mon, 25 Jul 2011 15:45:33 +0200 From: Matthias Schniedermeyer To: Luke Kenneth Casson Leighton Cc: linux-kernel@vger.kernel.org Subject: Re: ext3 hacked filesystem (by debian exim4 exploit) available for analysis and bugreporting Message-ID: <20110725134533.GA23781@citd.de> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 25.07.2011 13:08, Luke Kenneth Casson Leighton wrote: > folks, hi, > > apart from anything, files which cannot be deleted (and cannot be > detected as "corrupted" by fsck.ext3) is pretty damn serious. You did try lsattr and checked that the files aren't 'immutable'? Bis denn -- Real Programmers consider "what you see is what you get" to be just as bad a concept in Text Editors as it is in women. No, the Real Programmer wants a "you asked for it, you got it" text editor -- complicated, cryptic, powerful, unforgiving, dangerous.