LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices



Reply
 
Search this Thread
Old 12-06-2007, 03:04 PM   #1
rtregaskis
LQ Newbie
 
Registered: Dec 2007
Posts: 5

Rep: Reputation: 0
Unhappy All folders and files under /home deleted


I'm running RHEL v. 4 on two servers. All of the directories and files under /home disappeared seemingly with no reason. At least, there do not appear to be any log entries. Both servers are behind multiple layers of security. Anyone know of anything short of a directed attack or console command that would cause this?
 
Old 12-06-2007, 03:15 PM   #2
ilikejam
Senior Member
 
Registered: Aug 2003
Location: Glasgow
Distribution: Fedora / Solaris
Posts: 3,109

Rep: Reputation: 96
Hi.

Is /home on a seperate partition, and if so, is it mounted?

Dave
 
Old 12-06-2007, 04:55 PM   #3
David1357
Senior Member
 
Registered: Aug 2007
Location: South Carolina, U.S.A.
Distribution: Ubuntu, Fedora Core, Red Hat, SUSE, Gentoo, DSL, coLinux, uClinux
Posts: 1,302
Blog Entries: 1

Rep: Reputation: 107Reputation: 107
Quote:
Originally Posted by rtregaskis View Post
Anyone know of anything short of a directed attack or console command that would cause this?
If "/home" was on a separate drive or separate partition and the drive failed or the partition had unrecoverable errors preventing it from mounting, you would see this problem. However, you would expect to see a message in the output of "dmesg".
 
Old 12-07-2007, 09:06 AM   #4
rtregaskis
LQ Newbie
 
Registered: Dec 2007
Posts: 5

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by ilikejam View Post
Hi.

Is /home on a seperate partition, and if so, is it mounted?

Dave
The drives are in a RAID 5 array and are seen as a single logical volume. Within that volume, /home has a logical partition which is always mounted.

Ron
 
Old 12-07-2007, 09:33 AM   #5
rtregaskis
LQ Newbie
 
Registered: Dec 2007
Posts: 5

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by David1357 View Post
If "/home" was on a separate drive or separate partition and the drive failed or the partition had unrecoverable errors preventing it from mounting, you would see this problem. However, you would expect to see a message in the output of "dmesg".
Just rechecked dmesg - everything mounted correctly and without complaint last time around. And the drive configuration is RAID 5 with all drives seen as a single logical volume, /home is a separate logical partition.

Ron
 
Old 12-07-2007, 09:34 AM   #6
ilikejam
Senior Member
 
Registered: Aug 2003
Location: Glasgow
Distribution: Fedora / Solaris
Posts: 3,109

Rep: Reputation: 96
Does df show disk space in use for the /home volume? Or is it actually empty?

Dave
 
Old 12-07-2007, 10:57 AM   #7
rtregaskis
LQ Newbie
 
Registered: Dec 2007
Posts: 5

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by ilikejam View Post
Does df show disk space in use for the /home volume? Or is it actually empty?

Dave
It shows it as having files on both servers. However, just to add to the confusion, at least in my mind, I was able to analyze and reboot one machine. The TestDisk analysis showed that everything was OK. When I rebooted, all directories/files reappeared. ???

Ron
 
Old 12-07-2007, 11:09 AM   #8
ilikejam
Senior Member
 
Registered: Aug 2003
Location: Glasgow
Distribution: Fedora / Solaris
Posts: 3,109

Rep: Reputation: 96
Buh.

No idea what that could be. I recommend sacrificing a chicken. Or is it a goat you sacrifice for filesystem problems? I forget.
 
Old 12-07-2007, 11:19 AM   #9
rtregaskis
LQ Newbie
 
Registered: Dec 2007
Posts: 5

Original Poster
Rep: Reputation: 0
I don't know, but it beats slashing MY wrists! The 'lost' files were all legal files for our lawyers. They were rather upset by the whole thing if you know what I mean.
 
Old 12-07-2007, 11:51 AM   #10
ilikejam
Senior Member
 
Registered: Aug 2003
Location: Glasgow
Distribution: Fedora / Solaris
Posts: 3,109

Rep: Reputation: 96
Yes, I very much do know what you mean. Users don't take too kindly to data going AWOL.

Just out of interest, what volume management are you using?
And just to satisfy my credulity, could you post the following from the one that's still borked:
Code:
id
df -kl /home
df -i /home
mount | grep home
ls -la /home
du -s /home
Dave

Last edited by ilikejam; 12-07-2007 at 11:54 AM.
 
  


Reply

Tags
home


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How can I copy hidden home directory configuration files and folders? rm_-rf_windows Linux - General 3 06-29-2007 06:26 AM
Deleted the wrong folders Thanotos Linux - Newbie 8 11-07-2005 08:30 AM
Deleted the wrong folders Thanotos Slackware 3 11-02-2005 10:48 AM
recent attack via phpBB, log files deleted? accessed file system outside /home/ enzo250gto Linux - Security 8 12-17-2004 02:51 PM
retriving deleted files and folders nayabingi Linux - General 2 09-27-2004 11:26 AM


All times are GMT -5. The time now is 07:18 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration