Ubuntu Security :: Trashinfo Files Not Deleted When Empty Trash?
May 24, 2010
I don't know whether this is a bug or feature. But I find the fact that the Trash in Gnome doesn't delete trashinfo files a security liability.
I found in ./local/share/Trash/info thousands of .trashinfo files named exactly like the files deleted and each one contains the date of deletion.
I thought when I empty the trash bin every record of the files were removed. I understand that there are forensic ways to recover data and rm isn't very secure with journaled file systems, but forensic recovery isn't 100% and if the disk is written over several times the data is gone.
Here you have a permanent list of all the files you've deleted, without you knowing and the dates of deletion. IMO that's too much information.
Update: Weird after removing the files manually and then trying to delete files again using the trash I found no .trashinfo files, this time. So they were probably leftover files, but they didn't have a different owner/permission. Could this have been an issue and now fixed? (running Lucid)
Is there a way to securely empty the trash bin without the need to type some shred command into consoles. My intentions is to be able to securely delete files when the 'Empty Trash' is used so to save the trouble of going to a console and doing some commands using shred.
I have a Kingston 8gb Datatraveler that has been giving me troubles lately. For some reason after I delete files from it it still shows up as full and the files are shown in the hidden trash files. How do I get rid of these files? I can't delete them as they just show back up. Also, I tried to format the drive with gparted and it won't unmount. When I right click and select information, at the bottom it says: Unable to find mount point. Unable to read the contents of the file system. Because of this, some operations may be unavailable.
Apologies if this has been asked before, which I'm sure it has from what I see googling around, but I cant understand this fully.
I have a piles of files in the .Trash-1000 folder on my flash drive that I want to delete. I can see them if I go in as root using the command line and entering "gksu nautilus" but it still wont allow me to delete them.
I mount /home on a logical partition. Files and directories that I trash from here go nicely into the recycle bin, and I can right click on it and choose "Empty Trash" with no problem. Files off of the root directory in directories that I "own" (i.e. /mydir/*) do not play as nicely. I went ahead and followed instructions from another post, namely:
Code: sudo mkdir /.Trash sudo chmod 1777 /.Trash
And after trashing some files from /mydir, there is indeed a subdirectory with my uid (1000) and files that I trash from /mydir are going in there. However, the recycle bin on my desktop remains empty, and the only method I have for deleting said files is by deleting them from the /.Trash/1000 folders through the command line. So my question is: Is there anyway that I can trash files from /mydir, see them appear on the desktop recycle bin, and empty the trash without the need to rm them directly through the command line? Not sure if it will help, but here is my fstab:
Code: # / was on /dev/sda1 during installation UUID=4129f389-92be-459e-8bbc-928c1440f718 / ext4 errors=remount-ro 0 1 # /home was on /dev/sda6 during installation UUID=6a30914d-04a3-4b03-85bd-2bf16a68a41a /home ext4 defaults 0 2 # swap was on /dev/sda5 during installation UUID=f388cf04-bbd6-4bf9-9d69-0778b0f158fd none swap sw 0 0
I've been getting this error message:"The configuration defaults for GNOME Power Manager have not been installed correctly. Please contact your computer administrator."a few times, and it turns out to be because of low disk space. No worry, I empty the trash uninstall unneeded programs and clean out the downloads folder that filled up my disk. And all is ok. But not this time.Since I can't use X, I delete stuff from the terminal, and also make sure to clean out the .Trash in both /home and /root. But still the disk is full. I delete more stuff, but it doesn't even seem to go to .Trash. It disappears, but no more disk space.
If I move a file to the trash,I can restore it later.But if I empty the trash,I'll be warned that I cannot recover the files if I proceed.Is this really true or are there Linux applications for recovering files deleted from the trash?Uhm...are the files deleted completely and unrecoverably or are there any traces left behind?
I moved a few files from a directory in my home directory structure to the KDE trash folder, and then deleted them from the trash folder. About a minute later I regretted this, and now I'd like to see if there's any way to recover the files. First, are there any good utilities for restoring accidentally deleted files? If so, where would I look for these files? Does the KDE trash config file actually correspond to a physical directory somewhere, or do the files just remain hidden in their original location?
I use a CentOS 5.4 machine as a Samba file server for a WinXP SP3 box. I noted that when I deleted files under the Samba server from WinXP, there is no trash can for them. What I delete is lost for good. Is there a Samba config setting that puts deleted files into a trash can?
When I move something to Trash it doesn't show the option of "Empty Trash". I can use "move to Trash" and it just moving there like some ordinary folder, but shift+del give me an option for deleting the files. Using OpenSUSE 11.3 32bit.
Using Fedora 14 with Gnome 2.3 Desktop utilizing Compiz and Emerald theme manager. When I empty the trash, the icon is still the FULL Trash icon. I tried using different Emerald Themes, and different Icon sets, but still the Trash Icon stays full. I checked the trash folder in $HOME/.local/share/trash and found nothing, no hidden files.
I hope that I'm posting this thread in the right place. This involves a very unique problem which has caused the .Trash-1000 folder for my external USB drive to become corrupted, to the point of causing massive heat problems which then causes my system to crash, i.e. become completely inoperable, forcing me to do a hard reset.
The scenario: Recently I went through all of my backup data which is what I use that external USB drive for. After finding several GB of data files, some dating back 2 - 3 years from a root server that I used to have, I went ahead and tried to delete all of those files. Well, with exception to 3 folders, containing no more than perhaps 35 files which totalled less than 8 MB in space, everything was deleted properly without a hitch. The files that couldn't be deleted prompted some strange "couldn't delete blahblahblah file due to input/output error" message. One message for each file that couldn't be deleted.
Now mind you, I can open these files, look at them, rename them, copy them, but I cannot delete them. Still being pretty wet as far as Linux is concerned, I tried numerous suggestions that I could find on the internet, all of which had to do with file permissions in one form or another. I've tried everything that made any sense and still can't delete those files.
All of the data is my own, all of the hardware is mine, and I'm the only one using this machine. I'm not attempting to do anything illegal. Then I figured, smart as I am, why don't I just assign ownership of the .Trash folder to myself via the chown -R command, followed by deleting the files afterwards. Okay, the chown command gave me no error, I assumed all was well since it's my USB drive to begin with and since it automounts during every restart anyway. I just figured that this would be something to try. BIG MISTAKE !!!
My system runs just as perfectly as before, with but one exception. NOW, when I attempt to delete those files that I couldn't delete before, I don't get an error message anymore but the CPU starts hyperventilating during the deletion process which goes on endlessly (remember, we're taking about less than 8 MB of data) ... ultimately causing the system to crash, i.e. become totally unresponsive. NOW, if I delete additional files from that USB drive and then attempt to empty the trash, the newly deleted files take substantially longer too now. Not as long as the original "bad files" but still quite long. The drive itself checks out fine and it's not a dual-boot system with Windows. Just did a virus check recently too and everything checks out in that regard as well.
Can someone tell me how to reassign whatever original values there were for that external drive .Trash folder? I think if I could restore those values to whatever they used to be before I used the chown -R command, perhaps then everything would be fine again as far as the crashing is concerned. HELP .... (Please take a look at the screenshots too)
The last screenshots shows "preparing to delete" which takes a very long time. Then it takes anywhere from 15 to 45 seconds PER FILE before that miniscule file is actually supposedly deleted. Eventually, after a few files are deleted, the system crashes. I wrote "supposedly deleted" because after a reboot the files are still there .
Look at the screenshot, I have only one file in trash but AWN and Docky counts 47+1 items. When it's empty it counts 47, and there's no way to really empty. But files are really gone. It doesn't happens with Cairo Dock (I don't know why).
I'm running Ubuntu 10.04 and I'm having trouble emptying my trash bin. I've tried emptying the trash bin graphically but the items are still in there. I've also tried using nautilus to empty the trash but it didn't work either. I really need to free up some space because I'm down to 1.6 GBs of free space
For a month or so now, I have been enabling ssh and opening port 22. I cron'ed the start and stop commands to leave them open only a few hours a day. After a bit, I checked my logs to find that some IP or another was attempting to brute force my root account.
I took little real threat by the offense.
(1) my system does not allow root to login and
(2) it would cut them off sooner than later when my system issued the stop command.
fast forward
Today I log in to find that all of my log files, as viewed from the gnome log file viewer, were empty of entries from about noon yesterday and prior.
Though I haven't noticed anything at all out of the ordinary with my system, I would like to get more opinions on the matter. Would there be any conceivable way that this was an automatic system routine, a clean up action of something? Additionally, if I was indeed the victim of a hack, what can I do to further protect my system (keeping in mind that I do want to access my system via ssh from time to time)?
Just installed 9.04 on a new machine. Files I delete just seem to disappear completely instead of going into Trash. This is not what happened on my older machine.
Evolution 2.28.3 on Ubuntu 10.04 won't empty trash on exit even though this is specified in preferences. Neither will it expunge with right click on trash -> empty trash..e.Close Evolution and open your file browser. Go to /home/put-your-ubuntu-login-name-here/.evolution/mail/localThere are 2 files (Junk.cmeta and Trash.cmeta). I deleted the Trash.cmeta file and opened Evolution again.When you reopen Evolution, it creates a new Trash.cmeta file.
I haven't been able to find anything on the 'net about this: when running "rkhunter --enable all", I get this warning:
Code:
However, when I navigate to the gvfs-metadata folder, the home file is there, 124.8Kb in size, of unknown type and gedit can't open it. The file in /tmp/, on the other hand, doesn't exist.
Why is Terminal using a deleted file, and why is the home file being reported as deleted when it isn't?
Whenever i try to empty the Trash (As Root) it does so then gives me an error message saying that it can't delete a specific file. It's always the same file and it says:"The file or folder /home/.Trash-0/files/yesterday once more.mp3 does not exist."Having looked in this location logged in as root using both Dolphin and at the command line, this file doesn't exist.
I have some files in my user trash bin which don't get emptied. Can you please tell me where I can find my trash bin using Superuser Dolphin? Or how can I force empty it? I tried /home/.Trash-0/files but it's all empty.
Straight to the problem on my [Ubuntu 9.10].I cannot delete or empty my .Trash-1000 folder on my flash drive. I tried changing permission with chmod but no way, I cannot empty the folder via the Ubuntu main trash option 'Empty Trash'. I read a bunch of threads but no way.Do you know a solution that works to this problem?Even further. Do you know a way to tell nautilus to avoid using that folder in my USB devices and use instead the normal trash folder on my system?
This is just one of those annoying but superficial things: When I empty my recycle bin, the items fully delete (as far as I can tell) but the icon for the trash remains a full trash can. I have 10.04
Well I'll start off with the recent changes I've made. I have three hard drives in my PC, two of which are formated NTFS. I recently installed Storage Device Manager and changed a few options around so they auto-mount of start up. Well when I did this, and wanted to delete files off those drives, I suddenly was being promoted that I must delete them permanently or not all at (wouldn't go into the trash)
I added the lines to FSTAB: uid=1000,gid=1000 0 1
So for example my secondary drive is:
nls=iso8859-1,umask=000,uid=1000,gid=1000,0,1
And also added .Trash-1000 folders in each of the two NTFS drives.
When I delete items off one of the two NTFS disks they go to the trash... I don't get the "delete forever" prompt and I can actually see them in the trash bin.
But when I empty the trash the icon remains that of the "full" trash, despite when I open it there being no trash in it.
I have opensuse 11.2 with KDE installed and I changed the default File Manager to Konqueror. I cannot empty the Trash when right clicking on Icon in KDE4. If I try, then I get Icon Settings. Howto switch off these Icon Settings generally?
CentOS amd64 fresh installed two weeks ago. Turned off nightly per company policy. Turned on this morning, logged in, started firefox, surfed a bit, minimized, and then noticed that the bottom toolbar is empty except for the trashcan in the far right end. No alternate desktops, no minimized firefox screens, nothing.
How can I restore the data inside the trash after make it empty ?I need to restore an important folder from the trash and I can't find it there.I am using openSUSE11.1 (KDE)
I recently installed Ubuntu 10.04 alongside OSX on my unibody aluminum macbook. I've been setting it up, but I was wondering if there were any applets that could display things like CPU temps (maybe even RAM usage? I'm thinking along the lines of the iStat menubar app, but of course I'm willing to try out anything). I tried searching the Software Center, but couldn't quite find what I was looking for. I was exploring the keyboard shortcuts, and I was wondering if there was a way to set a shortcut to empty the trash? Like in OSX they have shift+apple+delete.
I had several files on my desktop that I wanted to delete so I left clicked at the top corner of one of them and dragged a box around the group to highlight them. Once done I deleted them. I must have included the trash can as that has gone as well. There is no undelete option in the menu so please, how can I get my trash can back.
