3 ms·

Keep in mind that making a file immutable doesn't prevent it from being unlinked. That can be removed and modified all the same If this is a real concern,

~~Keep in mind that making a file immutable doesn't prevent it from being unlinked. That can be removed and modified all the same~~ If this is a real concern, I'd be more mindful of what's being given privilege. It's atypical to chase - going as far to remove bad actors edit: Wrote this while still half asleep, tested - wrong lol. Keeping to prevent more folly

toast0 4y ago
Something with privilege could usually just remove the immutable flag and then go on and do whatever dumb stuff it wants to do... But they usually don't. My corporate macbook was at its most stable when I had set /etc/hosts immutable and the corporate chef got stuck and nobody yelled at me. Of course, a couple months later I did a mac os update and some corporate spyware interfered with the gpu driver... would have been updated if chef had run in the past three weeks. Whoops.