RE: [cobalt-users] RE: hacked raq

["John-Andrew M. Minniti" <drew.minniti@xxxxxxxxxxx>]

> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Cindy Tyo
> Sent: Wednesday, February 21, 2001 9:29 PM
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: [cobalt-users] RE: hacked raq
> Importance: High
>
>
> Randy,
>
> My ISP just called and had me telnet in, su to root and cd to
> /bin and run
> 'lsattr login'. It showed my login file as '----i---', which means
> impenetrable and a sign of having been hacked according to
> Cobalt (per my
> ISP's Cobalt person who has been dealing with Cobalt on a
> hacking issue).
>

Immutable files are really a sign of being hacked?  I don't understand why.
Shouldn't certain directories and files be immutable.  Its good extra
security.  (Well from dumbass hackers at least).  Hmmm....