Hacked?

thomasf · 03-02-2015, 07:42 AM

I'm shocked

I have a ext4 HDD, and i see this today > drwxr-x---+ 3 root root <
I think, this present a ACL but i have never set an ACL

Eventually hacked or make udisk2 this?

friendly Greeting
Thomas

JackHair · 03-02-2015, 08:02 AM

Except for the /home folders everything else is owned by root. That's how its supposed to be.

GazL · 03-02-2015, 08:09 AM

It very well might be something like udisks/udev, or the DE as part of its volume management. Running 'getfacl' on it will show you exactly what rules have been added.

thomasf · 03-02-2015, 08:30 AM

Quote:

Originally Posted by JackHair

Except for the /home folders everything else is owned by root. That's how its supposed to be.

but the + at the end

thomasf · 03-02-2015, 08:34 AM

Quote:

Originally Posted by GazL

It very well might be something like udisks/udev, or the DE as part of its volume management. Running 'getfacl' on it will show you exactly what rules have been added.

# owner: root
# group: root
user::rwx
group::r-x
other::r-x

... no acl, but why than the +

GazL · 03-02-2015, 09:05 AM

The '+' signifies that alternative access mechanisms are in use for that filesystem object. That typically means an ACL. I have no idea what else it could be, but maybe someone else will know of something.

thomasf · 03-02-2015, 10:18 AM

Quote:

Originally Posted by GazL

The '+' signifies that alternative access mechanisms are in use for that filesystem object. That typically means an ACL. I have no idea what else it could be, but maybe someone else will know of something.

eventually udisks2 ?

By the way:
I Use 14.1 with multilib and SlackE18.
SlackE18 is a little buggy
Today i have destroyed many file on the extern HDD as i used Terminology. I have create Directorys, have set the rights (chown -R user, chgrp -R group) and then .... many Files deleted and other Files unvisible for me.
Very Crazy thats all

thomasf · 03-02-2015, 10:46 AM

Ok, the + its from udisks2 (i think) I have unmounted and than directly "Hand-mounted" to /media/hd0 . No + !

Ok, than is the + normally and it's not a Problem with Right or Security Problem, but what have delete and change my Files. E18, Terminology, Bash?