锁定一些文件

chattr –R +i /bin /boot /lib /sbin

chattr –R +i /usr/bin /usr/include /usr/lib/usr/sbin

/etc  passwd shadow hosts resolv.conf fstab sudoers

锁定日志

Chattr +a /var/log/message

               /wtmp

保护/dev /tmp时chattr就不行了

/etc/fstab