Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

abrt creates empty folders named with non-printable characters

Hi there,

I've just spent two hours trying to figure out a very strange and worrying behavior on my Fedora 29 machine.

A random, empty folder is created every time I start the system and after some researches it appears to be abrt causing the problem. I've had to use audit to track changes since it was impossible for me to get information otherwise (system logs etc). This is what I got with the last one which - fortunately enough - was named with a strange yet printable character. (The previous ones used non-printable ones and ausearch refused to show their entries).

dave997@localhost ~]$ sudo ausearch -k testingChangesOnHomeDavid | aureport -f -i | grep Д
8887. 13/01/2019 13:42:40 Д mkdir yes /usr/bin/abrt-applet dave997 6761
8889. 13/01/2019 13:42:40 /home/dave997/Д openat yes /usr/bin/baloo_file dave997 6763
8890. 13/01/2019 13:42:40 /home/dave997/Д getxattr no /usr/bin/baloo_file dave997 6764
8891. 13/01/2019 13:42:40 /home/dave997/Д getxattr no /usr/bin/baloo_file dave997 6765
8892. 13/01/2019 13:42:40 /home/dave997/Д getxattr no /usr/bin/baloo_file dave997 6766
18805. 13/01/2019 13:43:05 Д getxattr no /usr/bin/kdeinit5 dave997 16690
18806. 13/01/2019 13:43:05 Д getxattr no /usr/bin/kdeinit5 dave997 16691
18807. 13/01/2019 13:43:05 Д getxattr no /usr/bin/kdeinit5 dave997 16692
19178. 13/01/2019 13:43:05 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17063
19179. 13/01/2019 13:43:05 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17064
19180. 13/01/2019 13:43:05 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17065
19181. 13/01/2019 13:43:05 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17066
19420. 13/01/2019 13:43:07 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17305
19421. 13/01/2019 13:43:07 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17306
19422. 13/01/2019 13:43:07 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17307
19423. 13/01/2019 13:43:07 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17308
19445. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17330
19450. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17335
19451. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17336
19452. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17337
19453. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17338
19454. 13/01/2019 13:43:10 /home/dave997/Д openat yes /usr/bin/dolphin dave997 17339
19463. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17348
19464. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17349
19465. 13/01/2019 13:43:10 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17350
19466. 13/01/2019 13:43:10 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17351
19470. 13/01/2019 13:43:10 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17355
19478. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17363
19479. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17364
19480. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17365
19481. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17366
19482. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17367
19483. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17368
19484. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17369
19485. 13/01/2019 13:43:11 /home/dave997/Д openat yes /usr/bin/dolphin dave997 17370
19487. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17372
19488. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17373
19489. 13/01/2019 13:43:11 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17374
19490. 13/01/2019 13:43:11 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17375
19693. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17578
19694. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17579
19695. 13/01/2019 13:43:12 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17580
19696. 13/01/2019 13:43:12 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17581
19723. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17608
19724. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17609
19725. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17610
19726. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17611
19727. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17612
19728. 13/01/2019 13:43:12 /home/dave997/Д openat yes /usr/bin/dolphin dave997 17613
19730. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17615
19731. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17616
19732. 13/01/2019 13:43:12 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17617
19733. 13/01/2019 13:43:12 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17618
19927. 13/01/2019 13:43:13 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17812
19928. 13/01/2019 13:43:13 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17813
19929. 13/01/2019 13:43:13 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17814
19930. 13/01/2019 13:43:13 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17815
19955. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17840
19963. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17848
19964. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17849
19965. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17850
19966. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17851
19967. 13/01/2019 13:43:16 /home/dave997/Д openat yes /usr/bin/dolphin dave997 17852
19969. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17854
19970. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17855
19971. 13/01/2019 13:43:16 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17856
19972. 13/01/2019 13:43:16 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17857
[dave997@localhost ~]$

The first lines are the ones to look at. Reported the whole ausearch output just for clarity.

Any ideas? Would be nice if we could have this fixed soon as it's a very annoying behavior which, among other things, creates suspects in someone who does not know who's acting behind the scenes.

Have a good afternoon,

David