On Fri, Sep 01, 2000 at 02:39:04PM -0400, Wesley A. Wannemacher wrote:
> Help (if it is not too much trouble).
>
> I have a Linux machine that has been recently
> rooted. I have found many strange things on the
> hard drive of the server. when doing an 'ls -la'
> in the /dev folder I see the following:
>
> drwxr-xr-x 7 root root 34816 Sep 1 14:27 .
> drwxr-xr-x 20 root root 1024 Sep 1 14:34 ..
> drwxr-xr-x 3 root root 1024 Jul 15 11:22 ..
> -rwxr-xr-x 1 root root 26450 Apr 17 1999 MAKEDEV
> -rwxr-xr-x 1 root root 1598 Apr 19 1999 MAKEDEV.ibcs
> lrwxrwxrwx 1 root root 4 Jun 11 1999 X0R -> null
> lrwxrwxrwx 1 root root 8 Jun 11 1999 arp -> inet/arp
> crw-rw-r-- 1 root root 10, 3 May 5 1998 atibm
> crw-r--r-- 1 root sys 14, 4 Apr 17 1999 audio
>
> Why is there an extra '..'? There was also a
> '...', but I have deleted it. How should I go
> about deleting the extra '..'? I am kinda new,
> so any help is appreciated, I can post any other
> information needed.
I would guess that one of the ..s infact is ".. " or some such (i.e.
two dots followed by white-space), observe:
[sune@sune:/home/sune]$mkdir ".. "
[sune@sune:/home/sune]$cd ".. "
/home/sune/..
[sune@sune:/home/sune/.. ]$cd ..
[sune@sune:/home/sune]$ls -ld . ..*
drwxr-xr-x 75 sune sune 4096 Sep 1 20:53 ./
drwxr-xr-x 7 root root 4096 Aug 30 00:21 ../
drwxrwxr-x 2 sune sune 4096 Sep 1 20:53 .. /
[sune@sune:/home/sune]$rmdir ".. "
If that trailing slash had not been there it would have looked similar
to what you found in /dev.
Regards,
--
Sune Kirkeby | "Imagine, if you will, that there were no
http://mel.interspace.dk/~sune/ | such thing as a hypothetical situation..."
PGP signature