Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1759997AbXIXSQj (ORCPT ); Mon, 24 Sep 2007 14:16:39 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1757225AbXIXSQc (ORCPT ); Mon, 24 Sep 2007 14:16:32 -0400 Received: from hawking.rebel.net.au ([203.20.69.83]:34169 "EHLO hawking.rebel.net.au" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1756952AbXIXSQb (ORCPT ); Mon, 24 Sep 2007 14:16:31 -0400 Message-ID: <46F7FEF9.2070702@davidnewall.com> Date: Tue, 25 Sep 2007 03:46:25 +0930 From: David Newall User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.2) Gecko/20070221 SeaMonkey/1.1.1 MIME-Version: 1.0 To: Dave Jones , Antoine Martin , tytso@thunk.org, Linux Kernel Development Subject: Re: bug in fsck or ext2/ext3? References: <46F7EC47.9010803@nagafix.co.uk> <20070924170439.GF8127@redhat.com> In-Reply-To: <20070924170439.GF8127@redhat.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 775 Lines: 19 Dave Jones wrote: > On Mon, Sep 24, 2007 at 05:56:39PM +0100, Antoine Martin wrote: > > > # rm -fr tmp/chroot.broken > > rm: cannot remove directory (...) > > Same result when trying to do anything to those files chown/chmod/touch: > > "Operation not permitted" > > Various files in the directories it complains about have their 'i' > bit set. lsattr will show you. chattr -i those files, and the > directory is removable again. Additionally, this is a classic symptom of malware. A directory named "..." is a big hint. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/