Linux Password trick with immutable bit using chattr command
With the help of utility called chattr, you can changes the file attributes on a Linux second extended file system. The operator + causes the selected attributes to be added to the existing attributes of the files; - causes them to be removed; and = causes them to be the only attributes that the files have.
1) Login as the root user
2) Type the following command to write protect /etc/shadow file:
# chattr +i /etc/shadow
3) Now lets test it with user vivek. Login as user vivek and type passwd command to change password:
$ passwd
Changing password for user vivek.
Changing password for vivek
(current) UNIX password: OLDPASSWED
New password: NEWPASSWD
Retype new password:NEWPASSWD
passwd: all authentication tokens updated successfully.
4) Now logout and try to login with new password. What you can't? Use the old password you can login now.A file with the 'i' attribute cannot be modified: it cannot be deleted or renamed, no link can be created to this file and no data can be written to the file. Only the superuser or a process possessing the CAP_LINUX_IMMUTABLE capability can set or clear this attribute.
5) Get the list of Linux second extended file system using the lsatter command (run as root user 
)
# lsattr /etc/shadow
----i-------- /etc/shadow
6) For rest of Linux second extended file system attributes read man chatter, man lsatter.
7) Please note that even root user is not allowed to change password. Before doing this root need to remove the attribute using command:
# chattr -i /etc/shadow # lsattr /etc/shadow
------------- /etc/shadow
E-mail this to a friend
Printable version
You may also be interested in other helpful articles:
- Howto: Protect account against a password cracking attack
- Howto set or force user to change a password at first login under Linux
- Hacking Beetel 220x ADSL router (Broadcom BCM6338)
- Linux turn OFF password expiration / aging
- How do I find out what shell I’m using?
Leave a Reply
We encourage your comments, and suggestions. But please stay on topic, be polite, and avoid spam. Thank you very much for stopping by our site!
Tags: authentication tokens, changing password, file attributes, immutable bit, passwd command, root user, system attributes, write protect file
Recent Comments
Today ~ 7 Comments
Today ~ 5 Comments
Yesterday ~ 3 Comments
Yesterday ~ 5 Comments
Yesterday ~ 18 Comments