Protecting files/folders from unwanted deletion

[bubbl]

Protecting files from unwanted deletion is very important security on the tasklist of Unix Administrators. On Linux boxes you can use the chattr command and that works ine on all my Ubuntu based servers.

Let’s give you some examples how chattr work under Linux:
To make a folder undeletable, run:

Code: Select all

sudo chattr +i -R foldername

After that, you can’t delete, rename or do anything with this folder. But if you don’t need this folder anymore or you’ve got to apply some changes to it run:

Code: Select all

sudo chattr -i -R foldername

To make a file undeletable, run:

Code: Select all

sudo chattr +i filename

To be able to change or delete the file, run:

Code: Select all

sudo chattr -i filename

[redhawk]

I prefer chmod myself it has more flexibility over chattr imo.

Richard S.

[Joe Schmoe]

I prefer chmod myself it has more flexibility over chattr

Non sequitor. The point of chattr is to protect it even against root.

Note: Yes, I know it's not foolproof as a truly malicious person or program can just "un-chattr" it and then delete it. But it is a step in the right direction.

[DougieLawson]

I prefer chmod myself it has more flexibility over chattr

Non sequitor. The point of chattr is to protect it even against root.

Note: Yes, I know it's not foolproof as a truly malicious person or program can just "un-chattr" it and then delete it. But it is a step in the right direction.

If someone malicious get access to your system then all bets are off. chattr is good protection against finger trouble.