How do you make a file or folder undeletable or unchangeable even to the root user? Use the chattr command.<\/p>\n
This would be useful if you have a that you don\u2019t want to delete by accident or if you are investigating a user\u2019s file and you do not want someone deleting the \u201cevidence\u201d while you investigate.<\/p>\n
The command works by setting the immutable bit of the file. Note: This command must be run as root<\/p>\n
How do you make a file immutable ? Now if I tried to delete the file I would get: If you want to unset or turn off the immutable bit (unchattr) you can use the command: If you want to check what are the attributes of a file you can do so using the command lsattr: In our example we would be getting: How do you make a file or folder undeletable or unchangeable even to the root user? Use the chattr command. This would be useful if you have a that you don\u2019t want to delete by accident or if you are investigating a user\u2019s file and you do not want someone deleting the \u201cevidence\u201d while you… <\/p>\n
\n
\nchattr +i file_name
\n<\/code>
\nAn example use would be:
\n
\n chattr +i \/var\/log\/messages
\n<\/code><\/p>\n
\n
\nrm -f \/var\/log\/messages
\nrm: cannot remove `messages\u2019: Operation not permitted
\n<\/code>
\nPlease remember that this was done as root !<\/p>\n
\n
\nchattr -i file_name
\n<\/code><\/p>\n
\n
\nlsattr file_name
\n<\/code><\/p>\n
\n
\nlsattr messages
\n \u2014-i\u2014\u2014\u2013 messages
\n<\/code>
\nnotice the immutable bit? It’s that little letter ‘i’ in the files permissions settings.<\/p>\n","protected":false},"excerpt":{"rendered":"