I have some files/directories which have obviously become corrupted. The disk checks out OK with fsck though and I don't want to reformat it.
One of the directories in question is as follows:-
total 40 d-wxr-S-wT 2 3775186858 3662599049 4096 Sep 11 1991 18039.dat ---xr-srwT 30 3023870906 1270584165 45056 Mar 1 1938 18591.dat -r-x-wxr-T 30 2743781339 1057221377 28672 Jun 6 1929 18684.dat
Even as root I can't seem to do anything with this, both rm and chmod fail with 'permission denied'. So, how do I do anything with these?
On 9 January 2017 at 14:34, Chris Green cl@isbd.net wrote:
d-wxr-S-wT 2 3775186858 3662599049 4096 Sep 11 1991 18039.dat ---xr-srwT 30 3023870906 1270584165 45056 Mar 1 1938 18591.dat -r-x-wxr-T 30 2743781339 1057221377 28672 Jun 6 1929 18684.dat
Even as root I can't seem to do anything with this, both rm and chmod fail with 'permission denied'. So, how do I do anything with these?
lsattr on them to find if they are immutable? chattr to change.
Regards, Srdjan
On Mon, Jan 09, 2017 at 07:55:27PM +0000, Srdjan Todorovic wrote:
On 9 January 2017 at 14:34, Chris Green cl@isbd.net wrote:
d-wxr-S-wT 2 3775186858 3662599049 4096 Sep 11 1991 18039.dat ---xr-srwT 30 3023870906 1270584165 45056 Mar 1 1938 18591.dat -r-x-wxr-T 30 2743781339 1057221377 28672 Jun 6 1929 18684.dat
Even as root I can't seem to do anything with this, both rm and chmod fail with 'permission denied'. So, how do I do anything with these?
lsattr on them to find if they are immutable? chattr to change.
When I run lsattr it says permission denied!
On 9 January 2017 at 22:06, Chris Green cl@isbd.net wrote:
On Mon, Jan 09, 2017 at 07:55:27PM +0000, Srdjan Todorovic wrote:
On 9 January 2017 at 14:34, Chris Green cl@isbd.net wrote:
d-wxr-S-wT 2 3775186858 3662599049 4096 Sep 11 1991 18039.dat ---xr-srwT 30 3023870906 1270584165 45056 Mar 1 1938 18591.dat -r-x-wxr-T 30 2743781339 1057221377 28672 Jun 6 1929 18684.dat
Even as root I can't seem to do anything with this, both rm and chmod fail with 'permission denied'. So, how do I do anything with these?
lsattr on them to find if they are immutable? chattr to change.
When I run lsattr it says permission denied!
Running it as root? Running some sort of ACL access control list software? Running ReiserFS? (quick google suggested this is notorious for corruption or something) Running some sort of SELinux or AppArmor or similar? Running a rootkit or some other malware?
Otherwise, I'm out of ideas.
Regards, Srdjan
On Mon, Jan 09, 2017 at 10:17:18PM +0000, Srdjan Todorovic wrote:
On 9 January 2017 at 22:06, Chris Green cl@isbd.net wrote:
On Mon, Jan 09, 2017 at 07:55:27PM +0000, Srdjan Todorovic wrote:
On 9 January 2017 at 14:34, Chris Green cl@isbd.net wrote:
d-wxr-S-wT 2 3775186858 3662599049 4096 Sep 11 1991 18039.dat ---xr-srwT 30 3023870906 1270584165 45056 Mar 1 1938 18591.dat -r-x-wxr-T 30 2743781339 1057221377 28672 Jun 6 1929 18684.dat
Even as root I can't seem to do anything with this, both rm and chmod fail with 'permission denied'. So, how do I do anything with these?
lsattr on them to find if they are immutable? chattr to change.
When I run lsattr it says permission denied!
Running it as root?
Yes, I am root.
Running some sort of ACL access control list software?
I've looked at the acls and can't see anything untoward (on the ones I can see!).
Running ReiserFS? (quick google suggested this is notorious for corruption or something)
No, standard ext4.
Running some sort of SELinux or AppArmor or similar? Running a rootkit or some other malware?
Not that I know of!
Otherwise, I'm out of ideas.
So am I, I'm copy all the files of the drive and I'm going to re-make the file systems.
On Tue, Jan 10, 2017 at 10:10:42AM +0000, Chris Green wrote:
Otherwise, I'm out of ideas.
So am I, I'm copy all the files of the drive and I'm going to re-make the file systems.
... and now, 16 hours later I'm seeing some errors.
I've run 'mkfs.ext4 -c -c /dev/sdb1 and on the *second* pass I'm seeing some errors. The first 0xAA pass got no errors but the pass that's running now, writing 0x55, is getting some errors. So, presumably, that's what the problem is. However it's strange that nothing else was showing any errors, SMART reported nothing at all and I've not had any errors reported while using the disk, not that I've seen anyway.
The disk is in my backup system in the garage ('off site' the garage is a fair way away from the house). The only corrupted files were in a backup copy of my previous desktop system. My daily incemental backups were all absolutely fine.
So I guess I just need to buy a new disk drive. I can maybe use the existing one for short term storage of videos and such.
On Wed, Jan 11, 2017 at 09:57:38AM +0000, Chris Green wrote:
On Tue, Jan 10, 2017 at 10:10:42AM +0000, Chris Green wrote:
Otherwise, I'm out of ideas.
So am I, I'm copy all the files of the drive and I'm going to re-make the file systems.
... and now, 16 hours later I'm seeing some errors.
I've run 'mkfs.ext4 -c -c /dev/sdb1 and on the *second* pass I'm seeing some errors. The first 0xAA pass got no errors but the pass that's running now, writing 0x55, is getting some errors. So, presumably, that's what the problem is. However it's strange that nothing else was showing any errors, SMART reported nothing at all and I've not had any errors reported while using the disk, not that I've seen anyway.
The disk is in my backup system in the garage ('off site' the garage is a fair way away from the house). The only corrupted files were in a backup copy of my previous desktop system. My daily incemental backups were all absolutely fine.
So I guess I just need to buy a new disk drive. I can maybe use the existing one for short term storage of videos and such.
As a follow-up to this I now have a new 3TB disk drive working happily in my backup system. I haven't yet got around to trying to reformat the 'bad' one in a different system to see what happens.
-
Chris Green -
Srdjan Todorovic