A specific directory is completely invisible to “ls” and “ls -la”, but I can “cd” into it
This started happening out of the blue. Originally, I was able to "ls" my "Storage" folder and all 3 subdirectories were listed accordingly. ('Beta Profiles' 'OS Backups' 'Software')
Starting yesterday, "ls" now only returns, ('Beta Profiles' 'OS Backups')
As if "Software" doesn't exist anymore
I can "cd" into "Software" still and all of my files are still intact. I can only get the folder to reappear by renaming it, but once I change it back, it won't show again!
I feel like a Rootkit may be nesting in there, because this is a common symptom. Any ideas on how to fix this?
bash directory ls
asked Jan 9 at 7:08
Tyler33444Tyler33444
1
|
show 1 more comment
This started happening out of the blue. Originally, I was able to "ls" my "Storage" folder and all 3 subdirectories were listed accordingly. ('Beta Profiles' 'OS Backups' 'Software')
Starting yesterday, "ls" now only returns, ('Beta Profiles' 'OS Backups')
As if "Software" doesn't exist anymore
I can "cd" into "Software" still and all of my files are still intact. I can only get the folder to reappear by renaming it, but once I change it back, it won't show again!
I feel like a Rootkit may be nesting in there, because this is a common symptom. Any ideas on how to fix this?
bash directory ls
asked Jan 9 at 7:08
Tyler33444Tyler33444
1
What is the result ofls -ld Software?
– Romeo Ninov
Jan 9 at 7:15
What Unix is this on, and what type of filesystem are the directories living on? Rootkits seldom nest in random subdirectories in users' home directories. Where are these directories located?
– Kusalananda
Jan 9 at 8:14
most obvious but you never know: islsan alias?alias ls? doesecho *show that directory?
– mosvy
Jan 9 at 8:34
@RomeoNinov the output of that command is this: “drwxrwxrwx 5 root root 4096 Nov 26 15:24 Software”
– Tyler33444
Jan 9 at 8:34
@Kusalananda Ubuntu. The drive is formatted ext4, but ecryptfs is used on that specific folder. This is an External drive mounted to /media/Storage
– Tyler33444
Jan 9 at 8:37
|
show 1 more comment
This started happening out of the blue. Originally, I was able to "ls" my "Storage" folder and all 3 subdirectories were listed accordingly. ('Beta Profiles' 'OS Backups' 'Software')
Starting yesterday, "ls" now only returns, ('Beta Profiles' 'OS Backups')
As if "Software" doesn't exist anymore
I can "cd" into "Software" still and all of my files are still intact. I can only get the folder to reappear by renaming it, but once I change it back, it won't show again!
I feel like a Rootkit may be nesting in there, because this is a common symptom. Any ideas on how to fix this?
bash directory ls
asked Jan 9 at 7:08
Tyler33444Tyler33444
1
This started happening out of the blue. Originally, I was able to "ls" my "Storage" folder and all 3 subdirectories were listed accordingly. ('Beta Profiles' 'OS Backups' 'Software')
Starting yesterday, "ls" now only returns, ('Beta Profiles' 'OS Backups')
As if "Software" doesn't exist anymore
I can "cd" into "Software" still and all of my files are still intact. I can only get the folder to reappear by renaming it, but once I change it back, it won't show again!
I feel like a Rootkit may be nesting in there, because this is a common symptom. Any ideas on how to fix this?
bash directory ls
bash directory ls
asked Jan 9 at 7:08
Tyler33444Tyler33444
1
asked Jan 9 at 7:08
Tyler33444Tyler33444
1
asked Jan 9 at 7:08
Tyler33444Tyler33444
1
asked Jan 9 at 7:08
Tyler33444Tyler33444
1
asked Jan 9 at 7:08
Tyler33444Tyler33444
1
1
What is the result ofls -ld Software?
– Romeo Ninov
Jan 9 at 7:15
What Unix is this on, and what type of filesystem are the directories living on? Rootkits seldom nest in random subdirectories in users' home directories. Where are these directories located?
– Kusalananda
Jan 9 at 8:14
most obvious but you never know: islsan alias?alias ls? doesecho *show that directory?
– mosvy
Jan 9 at 8:34
@RomeoNinov the output of that command is this: “drwxrwxrwx 5 root root 4096 Nov 26 15:24 Software”
– Tyler33444
Jan 9 at 8:34
@Kusalananda Ubuntu. The drive is formatted ext4, but ecryptfs is used on that specific folder. This is an External drive mounted to /media/Storage
– Tyler33444
Jan 9 at 8:37
|
show 1 more comment
What is the result ofls -ld Software?
– Romeo Ninov
Jan 9 at 7:15
What Unix is this on, and what type of filesystem are the directories living on? Rootkits seldom nest in random subdirectories in users' home directories. Where are these directories located?
– Kusalananda
Jan 9 at 8:14
most obvious but you never know: islsan alias?alias ls? doesecho *show that directory?
– mosvy
Jan 9 at 8:34
@RomeoNinov the output of that command is this: “drwxrwxrwx 5 root root 4096 Nov 26 15:24 Software”
– Tyler33444
Jan 9 at 8:34
@Kusalananda Ubuntu. The drive is formatted ext4, but ecryptfs is used on that specific folder. This is an External drive mounted to /media/Storage
– Tyler33444
Jan 9 at 8:37
What is the result of
ls -ld Software?– Romeo Ninov
Jan 9 at 7:15
What is the result of
ls -ld Software?– Romeo Ninov
Jan 9 at 7:15
What Unix is this on, and what type of filesystem are the directories living on? Rootkits seldom nest in random subdirectories in users' home directories. Where are these directories located?
– Kusalananda
Jan 9 at 8:14
What Unix is this on, and what type of filesystem are the directories living on? Rootkits seldom nest in random subdirectories in users' home directories. Where are these directories located?
– Kusalananda
Jan 9 at 8:14
most obvious but you never know: is
ls an alias? alias ls? does echo * show that directory?– mosvy
Jan 9 at 8:34
most obvious but you never know: is
ls an alias? alias ls? does echo * show that directory?– mosvy
Jan 9 at 8:34
@RomeoNinov the output of that command is this: “drwxrwxrwx 5 root root 4096 Nov 26 15:24 Software”
– Tyler33444
Jan 9 at 8:34
@RomeoNinov the output of that command is this: “drwxrwxrwx 5 root root 4096 Nov 26 15:24 Software”
– Tyler33444
Jan 9 at 8:34
@Kusalananda Ubuntu. The drive is formatted ext4, but ecryptfs is used on that specific folder. This is an External drive mounted to /media/Storage
– Tyler33444
Jan 9 at 8:37
@Kusalananda Ubuntu. The drive is formatted ext4, but ecryptfs is used on that specific folder. This is an External drive mounted to /media/Storage
– Tyler33444
Jan 9 at 8:37
|
show 1 more comment
2 Answers
2
active
oldest
votes
It is by chance that "Storage" folder mounted through SMB/cifs? If you don't know you can check it in "/etc/fstab" file or typing the command "mount | grep cifs".
If that is the case, you could try the "vers=1.0" option while mounting the FS (less secure), or if you have access to the server, modifying the share and mounting it through NFS.
answered Jan 9 at 8:34
rbrtflrrbrtflr
613
Well, the machine connects to the drive through USB 3.0, and uses Ecryptfs for encryption. BUT, the machine does host this drive as a Samba share. This machine is mainly an SMB server, so maybe Samba has done something weird
– Tyler33444
Jan 9 at 8:42
I think you are right, it seems a Samba issue (maybe only with some clients). I fixed similar problems in the past (random disappearing folders/files) by forcing an older cifs version in clients, but this is an insecure option and vulnerable to exploits.
– rbrtflr
Jan 9 at 9:07
Yeah the folder isn’t appearing in the Samba share. I tried on macOS Windows and now Linux. No dice. Is there anything I can do to fix this or is the folder just screwed?
– Tyler33444
Jan 9 at 16:35
Maybe the output of “dmesg” will contain some useful info about the problem. You could try mounting the share on a client and then executing “dmesg” or “dmesg —ctime”.
– rbrtflr
Jan 9 at 18:04
Output was too long to paste here, so here's a link to it (its hosted on my server, pardon the domain) tdserver.ddns.net:65403/output.txt. That was with Kali Linux
– Tyler33444
Jan 10 at 2:44
|
show 2 more comments
This was fixed by experimentation. Nothing else was working, so I decided to rebuild my eCryptfs folder. This new folder uses the same name as the last one and uses the same encryption key. No idea why that last folder glitched out, but I think it was definitely related to eCryptfs, as it is working normally again
answered 3 mins ago
Tyler33444Tyler33444
1
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f493396%2fa-specific-directory-is-completely-invisible-to-ls-and-ls-la-but-i-can-cd%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
It is by chance that "Storage" folder mounted through SMB/cifs? If you don't know you can check it in "/etc/fstab" file or typing the command "mount | grep cifs".
If that is the case, you could try the "vers=1.0" option while mounting the FS (less secure), or if you have access to the server, modifying the share and mounting it through NFS.
answered Jan 9 at 8:34
rbrtflrrbrtflr
613
Well, the machine connects to the drive through USB 3.0, and uses Ecryptfs for encryption. BUT, the machine does host this drive as a Samba share. This machine is mainly an SMB server, so maybe Samba has done something weird
– Tyler33444
Jan 9 at 8:42
I think you are right, it seems a Samba issue (maybe only with some clients). I fixed similar problems in the past (random disappearing folders/files) by forcing an older cifs version in clients, but this is an insecure option and vulnerable to exploits.
– rbrtflr
Jan 9 at 9:07
Yeah the folder isn’t appearing in the Samba share. I tried on macOS Windows and now Linux. No dice. Is there anything I can do to fix this or is the folder just screwed?
– Tyler33444
Jan 9 at 16:35
Maybe the output of “dmesg” will contain some useful info about the problem. You could try mounting the share on a client and then executing “dmesg” or “dmesg —ctime”.
– rbrtflr
Jan 9 at 18:04
Output was too long to paste here, so here's a link to it (its hosted on my server, pardon the domain) tdserver.ddns.net:65403/output.txt. That was with Kali Linux
– Tyler33444
Jan 10 at 2:44
|
show 2 more comments
It is by chance that "Storage" folder mounted through SMB/cifs? If you don't know you can check it in "/etc/fstab" file or typing the command "mount | grep cifs".
If that is the case, you could try the "vers=1.0" option while mounting the FS (less secure), or if you have access to the server, modifying the share and mounting it through NFS.
answered Jan 9 at 8:34
rbrtflrrbrtflr
613
Well, the machine connects to the drive through USB 3.0, and uses Ecryptfs for encryption. BUT, the machine does host this drive as a Samba share. This machine is mainly an SMB server, so maybe Samba has done something weird
– Tyler33444
Jan 9 at 8:42
I think you are right, it seems a Samba issue (maybe only with some clients). I fixed similar problems in the past (random disappearing folders/files) by forcing an older cifs version in clients, but this is an insecure option and vulnerable to exploits.
– rbrtflr
Jan 9 at 9:07
Yeah the folder isn’t appearing in the Samba share. I tried on macOS Windows and now Linux. No dice. Is there anything I can do to fix this or is the folder just screwed?
– Tyler33444
Jan 9 at 16:35
Maybe the output of “dmesg” will contain some useful info about the problem. You could try mounting the share on a client and then executing “dmesg” or “dmesg —ctime”.
– rbrtflr
Jan 9 at 18:04
Output was too long to paste here, so here's a link to it (its hosted on my server, pardon the domain) tdserver.ddns.net:65403/output.txt. That was with Kali Linux
– Tyler33444
Jan 10 at 2:44
|
show 2 more comments
It is by chance that "Storage" folder mounted through SMB/cifs? If you don't know you can check it in "/etc/fstab" file or typing the command "mount | grep cifs".
If that is the case, you could try the "vers=1.0" option while mounting the FS (less secure), or if you have access to the server, modifying the share and mounting it through NFS.
answered Jan 9 at 8:34
rbrtflrrbrtflr
613
It is by chance that "Storage" folder mounted through SMB/cifs? If you don't know you can check it in "/etc/fstab" file or typing the command "mount | grep cifs".
If that is the case, you could try the "vers=1.0" option while mounting the FS (less secure), or if you have access to the server, modifying the share and mounting it through NFS.
answered Jan 9 at 8:34
rbrtflrrbrtflr
613
edited Jan 9 at 10:03
answered Jan 9 at 8:34
rbrtflrrbrtflr
613
answered Jan 9 at 8:34
rbrtflrrbrtflr
613
answered Jan 9 at 8:34
rbrtflrrbrtflr
613
613
Well, the machine connects to the drive through USB 3.0, and uses Ecryptfs for encryption. BUT, the machine does host this drive as a Samba share. This machine is mainly an SMB server, so maybe Samba has done something weird
– Tyler33444
Jan 9 at 8:42
I think you are right, it seems a Samba issue (maybe only with some clients). I fixed similar problems in the past (random disappearing folders/files) by forcing an older cifs version in clients, but this is an insecure option and vulnerable to exploits.
– rbrtflr
Jan 9 at 9:07
Yeah the folder isn’t appearing in the Samba share. I tried on macOS Windows and now Linux. No dice. Is there anything I can do to fix this or is the folder just screwed?
– Tyler33444
Jan 9 at 16:35
Maybe the output of “dmesg” will contain some useful info about the problem. You could try mounting the share on a client and then executing “dmesg” or “dmesg —ctime”.
– rbrtflr
Jan 9 at 18:04
Output was too long to paste here, so here's a link to it (its hosted on my server, pardon the domain) tdserver.ddns.net:65403/output.txt. That was with Kali Linux
– Tyler33444
Jan 10 at 2:44
|
show 2 more comments
Well, the machine connects to the drive through USB 3.0, and uses Ecryptfs for encryption. BUT, the machine does host this drive as a Samba share. This machine is mainly an SMB server, so maybe Samba has done something weird
– Tyler33444
Jan 9 at 8:42
I think you are right, it seems a Samba issue (maybe only with some clients). I fixed similar problems in the past (random disappearing folders/files) by forcing an older cifs version in clients, but this is an insecure option and vulnerable to exploits.
– rbrtflr
Jan 9 at 9:07
Yeah the folder isn’t appearing in the Samba share. I tried on macOS Windows and now Linux. No dice. Is there anything I can do to fix this or is the folder just screwed?
– Tyler33444
Jan 9 at 16:35
Maybe the output of “dmesg” will contain some useful info about the problem. You could try mounting the share on a client and then executing “dmesg” or “dmesg —ctime”.
– rbrtflr
Jan 9 at 18:04
Output was too long to paste here, so here's a link to it (its hosted on my server, pardon the domain) tdserver.ddns.net:65403/output.txt. That was with Kali Linux
– Tyler33444
Jan 10 at 2:44
Well, the machine connects to the drive through USB 3.0, and uses Ecryptfs for encryption. BUT, the machine does host this drive as a Samba share. This machine is mainly an SMB server, so maybe Samba has done something weird
– Tyler33444
Jan 9 at 8:42
Well, the machine connects to the drive through USB 3.0, and uses Ecryptfs for encryption. BUT, the machine does host this drive as a Samba share. This machine is mainly an SMB server, so maybe Samba has done something weird
– Tyler33444
Jan 9 at 8:42
I think you are right, it seems a Samba issue (maybe only with some clients). I fixed similar problems in the past (random disappearing folders/files) by forcing an older cifs version in clients, but this is an insecure option and vulnerable to exploits.
– rbrtflr
Jan 9 at 9:07
I think you are right, it seems a Samba issue (maybe only with some clients). I fixed similar problems in the past (random disappearing folders/files) by forcing an older cifs version in clients, but this is an insecure option and vulnerable to exploits.
– rbrtflr
Jan 9 at 9:07
Yeah the folder isn’t appearing in the Samba share. I tried on macOS Windows and now Linux. No dice. Is there anything I can do to fix this or is the folder just screwed?
– Tyler33444
Jan 9 at 16:35
Yeah the folder isn’t appearing in the Samba share. I tried on macOS Windows and now Linux. No dice. Is there anything I can do to fix this or is the folder just screwed?
– Tyler33444
Jan 9 at 16:35
Maybe the output of “dmesg” will contain some useful info about the problem. You could try mounting the share on a client and then executing “dmesg” or “dmesg —ctime”.
– rbrtflr
Jan 9 at 18:04
Maybe the output of “dmesg” will contain some useful info about the problem. You could try mounting the share on a client and then executing “dmesg” or “dmesg —ctime”.
– rbrtflr
Jan 9 at 18:04
Output was too long to paste here, so here's a link to it (its hosted on my server, pardon the domain) tdserver.ddns.net:65403/output.txt. That was with Kali Linux
– Tyler33444
Jan 10 at 2:44
Output was too long to paste here, so here's a link to it (its hosted on my server, pardon the domain) tdserver.ddns.net:65403/output.txt. That was with Kali Linux
– Tyler33444
Jan 10 at 2:44
|
show 2 more comments
This was fixed by experimentation. Nothing else was working, so I decided to rebuild my eCryptfs folder. This new folder uses the same name as the last one and uses the same encryption key. No idea why that last folder glitched out, but I think it was definitely related to eCryptfs, as it is working normally again
answered 3 mins ago
Tyler33444Tyler33444
1
add a comment |
This was fixed by experimentation. Nothing else was working, so I decided to rebuild my eCryptfs folder. This new folder uses the same name as the last one and uses the same encryption key. No idea why that last folder glitched out, but I think it was definitely related to eCryptfs, as it is working normally again
answered 3 mins ago
Tyler33444Tyler33444
1
add a comment |
This was fixed by experimentation. Nothing else was working, so I decided to rebuild my eCryptfs folder. This new folder uses the same name as the last one and uses the same encryption key. No idea why that last folder glitched out, but I think it was definitely related to eCryptfs, as it is working normally again
answered 3 mins ago
Tyler33444Tyler33444
1
This was fixed by experimentation. Nothing else was working, so I decided to rebuild my eCryptfs folder. This new folder uses the same name as the last one and uses the same encryption key. No idea why that last folder glitched out, but I think it was definitely related to eCryptfs, as it is working normally again
answered 3 mins ago
Tyler33444Tyler33444
1
answered 3 mins ago
Tyler33444Tyler33444
1
answered 3 mins ago
Tyler33444Tyler33444
1
answered 3 mins ago
Tyler33444Tyler33444
1
1
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f493396%2fa-specific-directory-is-completely-invisible-to-ls-and-ls-la-but-i-can-cd%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
What is the result of
ls -ld Software?– Romeo Ninov
Jan 9 at 7:15
What Unix is this on, and what type of filesystem are the directories living on? Rootkits seldom nest in random subdirectories in users' home directories. Where are these directories located?
– Kusalananda
Jan 9 at 8:14
most obvious but you never know: is
lsan alias?alias ls? doesecho *show that directory?– mosvy
Jan 9 at 8:34
@RomeoNinov the output of that command is this: “drwxrwxrwx 5 root root 4096 Nov 26 15:24 Software”
– Tyler33444
Jan 9 at 8:34
@Kusalananda Ubuntu. The drive is formatted ext4, but ecryptfs is used on that specific folder. This is an External drive mounted to /media/Storage
– Tyler33444
Jan 9 at 8:37