0

This started happening out of the blue. Originally, I was able to "ls" my "Storage" folder and all 3 subdirectories were listed accordingly. ('Beta Profiles' 'OS Backups' 'Software')

Starting yesterday, "ls" now only returns, ('Beta Profiles' 'OS Backups')

As if "Software" doesn't exist anymore

I can "cd" into "Software" still and all of my files are still intact. I can only get the folder to reappear by renaming it, but once I change it back, it won't show again!

I feel like a Rootkit may be nesting in there, because this is a common symptom. Any ideas on how to fix this?

  • What is the result of ls -ld Software? – Romeo Ninov Jan 9 at 7:15
  • What Unix is this on, and what type of filesystem are the directories living on? Rootkits seldom nest in random subdirectories in users' home directories. Where are these directories located? – Kusalananda Jan 9 at 8:14
  • most obvious but you never know: is ls an alias? alias ls? does echo * show that directory? – mosvy Jan 9 at 8:34
  • @RomeoNinov the output of that command is this: “drwxrwxrwx 5 root root 4096 Nov 26 15:24 Software” – Tyler33444 Jan 9 at 8:34
  • @Kusalananda Ubuntu. The drive is formatted ext4, but ecryptfs is used on that specific folder. This is an External drive mounted to /media/Storage – Tyler33444 Jan 9 at 8:37
2

It is by chance that "Storage" folder mounted through SMB/cifs? If you don't know you can check it in "/etc/fstab" file or typing the command "mount | grep cifs". If that is the case, you could try the "vers=1.0" option while mounting the FS (less secure), or if you have access to the server, modifying the share and mounting it through NFS.

  • Well, the machine connects to the drive through USB 3.0, and uses Ecryptfs for encryption. BUT, the machine does host this drive as a Samba share. This machine is mainly an SMB server, so maybe Samba has done something weird – Tyler33444 Jan 9 at 8:42
  • I think you are right, it seems a Samba issue (maybe only with some clients). I fixed similar problems in the past (random disappearing folders/files) by forcing an older cifs version in clients, but this is an insecure option and vulnerable to exploits. – rbrtflr Jan 9 at 9:07
  • Yeah the folder isn’t appearing in the Samba share. I tried on macOS Windows and now Linux. No dice. Is there anything I can do to fix this or is the folder just screwed? – Tyler33444 Jan 9 at 16:35
  • Maybe the output of “dmesg” will contain some useful info about the problem. You could try mounting the share on a client and then executing “dmesg” or “dmesg —ctime”. – rbrtflr Jan 9 at 18:04
  • Output was too long to paste here, so here's a link to it (its hosted on my server, pardon the domain) tdserver.ddns.net:65403/output.txt. That was with Kali Linux – Tyler33444 Jan 10 at 2:44

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.