linux-ext4 - Re: debuge2fs not displaying /dev folder

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 15 Jan 2013 12:00:31 -0600
From:	Eric Sandeen <sandeen@...hat.com>
To:	Andreas Dilger <adilger@...ger.ca>
CC:	Prashant Shah <pshah.mumbai@...il.com>, linux-ext4@...r.kernel.org
Subject: Re: debuge2fs not displaying /dev folder

On 1/15/13 11:43 AM, Andreas Dilger wrote:
> 
> On 2013-01-14, at 11:01 PM, Prashant Shah wrote:
>> When using debuge2fs on a ext3 partition the /dev partition does not
>> show any entries at all. While running it on a ext4 partition only
>> part of entries are shown for /dev.
>>
>> Below is the list of files and folder within /dev folder residing on
>> a ext4 partition. Using "debugfs" shows around 92 entries while "ls"
>> shows around 217 entries. A block level dump also shows the same
>> folders as "debugfs".
> 
> The first and most important question is whether "/dev" is a real
> filesystem, or if it is a virtual (e.g. "tmpfs" type) filesystem
> on your machine?

was going to say the same thing; try

# mount | grep "on /dev"

>> --------------------- debugfs --------------------
>> 3014659  (12) .    2  (12) ..    3014663  (12) fd    3014664  (16) mapper
>> 3014665  (12) pts    3014666  (12) shm    3014667  (16) agpgart
>>
>>
>> --------- from ls -----------
>> autofs           ecryptfs  loop6               pts    random    sr0
>> tty2   tty35  tty50  tty9       ttyS22  uinput      vcsa2
>> block            fb0       loop7               ram0   rfkill    stderr
> 
> It would be useful to show "ls -li" information for some of the
> entries that appear via debugfs (e.g. "fd", "pts", and "shm" above),
> and also some of the entries that do not appear in debugfs.

Yep, I'm guessing you are seeing some installer-created devices in the root fs's
/dev but that something has been mounted over the top of it.

-Eric

 
> Cheers, Andreas


--
To unsubscribe from this list: send the line "unsubscribe linux-ext4" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html