chflags issue

[anthonyc]

Hi,

I'am trying some protection on files with chflags but i have issues.

As root user:

> touch /etc/file1
> chflags sappnd /etc/file1
> echo test >/etc/file1
chflags: /etc/file1: Operation not permitted
> chflags nosappnd /etc/file1
chflags: /etc/file1: Operation not permitted

root user cannot write to the file with append-only flag and it cannot remove the flag

What's wrong ?

Thanks.

[e1-531g]

Originally Posted by anthonyc

What's wrong ?

Everything is alright.

You must restart your operating system to security level 0 if you want to remove sappnd flag.

You probably can append to file. Use >> instead of >.

See chflags(1) and securelevel(7) manpages.

[anthonyc]

Thanks !

I use chattr on Linux that do not need a restart to remove flags

OpenBSD is really a more secure OS.

[e1-531g]

Originally Posted by anthonyc

Thanks !

I use chattr on Linux that do not need a restart to remove flags

OpenBSD is really a more secure OS.

Yes, Linux's chattr is slightly different than OpenBSD's chflags.