RE: [cobalt-users] hacked raq + chattr command

["GPS" <gps@xxxxxxxxxxxxxx>]

>
>Ref - http://list.cobalt.com/pipermail/cobalt-users/2001-February/035170.html
>
>What are the benefits of using the chattr command if it can be undone using
>the same command with a different flag?
>
>For example, someone on the list recommended using:
>
>chattr -i /bin/login
>
>to protect login. But the manual on chattr (and the ref link above) says to
>the following about the command.
>
>Opcodes
>+ Add attribute
>- Remove attribute
>
>So wouldn't actually be "chattr +i /bin/login" to enable, and "chattr -i
>/bin/login" to disable? But I still don't see the point if the attributes can
>be removed.
>
>David

It's not a fool-proof measure...just an extra precaution. Since it seems that 
it's not a widely known or used file protection it is effective because it immediately
throws the less-experianced for a loop. (myself included!)