Red Hat Bugzilla – Bug 149480
debugfs ls / ls -l / ls -d is not very useful for hacked filesystems
Last modified: 2015-01-07 19:09:28 EST
adding an option to ls to produce a parsable output (-p)
while working with a compromized system (suckit root kit)
hidden files were viewable by debugfs but not any other utility.
when spaces and tabs were put into the directory names defugfs did
not "show" them.
ie: /var/cache/ /hiddenfiles
quotes the output so is can be parsed easily.
#debugfs /dev/hdc3 -R 'ls -p "/tmp"' 2> /dev/null
Created attachment 111337 [details]
Created attachment 111338 [details]
In order to file a RHEL feature request, please either contact Red Hat's
Technical Support line at 888-REDHAT-1 or file a web ticket at
http://www.redhat.com/apps/support/. Bugzilla is not an official support
channel, has no response guarantees, and may not route your request to the
correct area to assist you. Using the official support channels above will
guarantee that your issue is handled appropriately and routed to the
individual or group which can best assist you with this issue and will also
allow Red Hat to track the issue, ensuring that any applicable feature
addition is included in all releases and is not dropped from a future update
or major release.
neither option provides a valid path as suggested above.
migrating to http://sourceforge.net/tracker/index.php?
use the url in the URL field to follow to the correct SF.net RFE page.