Gea-Suan LinJul 20, 2025

https://blog.gslin.org/archives/2025/07/20/12515/bsd-%e7%b3%bb%e7%9a%84-chflags-sappend-%e4%bb%a5%e5%8f%8a-schg/

BSD 系的 chflags (sappend 以及 schg)

#27001 #audit #auditing #bsd #chflags #freebsd #iso #log #openbsd #root #sappend #schg

BSD 系的 chflags (sappend 以及 schg)

Lobsters 上看到「When Root Meets Immutable: OpenBSD chflags vs. Log Tampering」這篇在講 BSD 系 OS 的 chflags，頗懷念的東西... 文章作者在處理 ISO 27001 裡面的要求，希望即使 local root 都被拿到的情況下，仍然可以確保 audit log 的方式： Control A.12.

Gea-Suan Lin's BLOG
N-gated Hacker NewsJul 18, 2025
Oh, look! Another riveting tale of digital impossibility where the protagonist is too busy battling file permissions to get anything done. 😴🔒 Because evidently, the world desperately needed another 1614-word snooze fest on OpenBSD's #chflags, told with all the excitement of watching paint dry. 📜💤
https://rsadowski.de/posts/2025/openbsd-immutable-system-logs/ #digitalimpossibility #filepermissions #OpenBSD #snoozefest #techhumor #HackerNews #ngated
When Root Meets Immutable: OpenBSD chflags vs. Log Tampering

Rafael Sadowski

rsadowski.de
Peter N. M. HansteenJul 18, 2025
When Root Meets Immutable: OpenBSD chflags vs. Log Tampering https://www.undeadly.org/cgi?action=article;sid=20250718072438 #openbsd #immutable #chflags #logs #logtampering #security #hacking
When Root Meets Immutable: OpenBSD chflags vs. Log Tampering

Show threadAnubhavMay 10, 2023

@mfjurbala
On a rare moon, a message may be posted to "#wall(1)" <https://man.freebsd.org/cgi/man.cgi?query=wall&apropos=0&sektion=1&manpath=FreeBSD+13.2-STABLE&arch=default&format=html>

ZFS has sent "#chflags(1)" <https://man.freebsd.org/cgi/man.cgi?query=chflags&apropos=0&sektion=1&manpath=FreeBSD+13.2-STABLE&arch=default&format=html> to the same rare status.
#FreeBSD #RockyLinux

wall(1)