[DEBUG] Linux resolve error ‘chmod: changing permissions of ‘resolv.conf’: Operation not permitted’

Error Reporting Command

# chmod 644 resolv.conf

Error Code

chmod: changing permissions of 'resolv.conf': Operation not permitted

Analysis

This file is locked by chattr command

Solution

Step One: Cancel the lock

# chattr -i /etc/resolv.conf

Step Two: Change the file’s privilege

# chmod 644 resolv.conf

Step Three: Relock this file

# chattr +i /etc/resolv.conf

[CONTENT] Linux common parameters of /etc/fstab file

/dev/vg/lv_var /var xfs nodev,nosuid,noexec 0 0
/dev/vg/lv_var_log /var/log xfs nodev,nosuid,noexec,x-systemd.requires-mounts-for=/var 0 0

(
Add:
1) nodev parameter here means this directory can not be interpreted by devices or blocks
2) nosuid parameter here means no setuid files can be created in this directory
3) noexec parameter here means no files can be executed in this directory
4) x-systemd.requires-mounts-for=/var here parameter means /var/log directory can not be mounted until /var directory has been mounted
)

[STEP] Linux Audit Log join /var/log/message

Main Content:

Step One: Modify /audit/plugins.d/syslog.conf file

# vim /audit/plugins.d/syslog.conf

Modify part content as follow:

Modify part content as follow:
......
active = no
......

Step Two: Restart auditd Service

# service auditd restart

Reference:

https://access.redhat.com/solutions/637863