# Revision history [back]

### abrt creates empty folders named with non-printable characters

Hi there,

I've just spent two hours trying to figure out a very strange and worrying behavior on my Fedora 29 machine.

A random, empty folder is created every time I start the system and after some researches it appears to be abrt causing the problem. I've had to use audit to track changes since it was impossible for me to get information otherwise (system logs etc). This is what I got with the last one which - fortunately enough - was named with a strange yet printable character. (The previous ones used non-printable ones and ausearch refused to show their entries).

dave997@localhost ~]$sudo ausearch -k testingChangesOnHomeDavid | aureport -f -i | grep Д 8887. 13/01/2019 13:42:40 Д mkdir yes /usr/bin/abrt-applet dave997 6761 8889. 13/01/2019 13:42:40 /home/dave997/Д openat yes /usr/bin/baloo_file dave997 6763 8890. 13/01/2019 13:42:40 /home/dave997/Д getxattr no /usr/bin/baloo_file dave997 6764 8891. 13/01/2019 13:42:40 /home/dave997/Д getxattr no /usr/bin/baloo_file dave997 6765 8892. 13/01/2019 13:42:40 /home/dave997/Д getxattr no /usr/bin/baloo_file dave997 6766 18805. 13/01/2019 13:43:05 Д getxattr no /usr/bin/kdeinit5 dave997 16690 18806. 13/01/2019 13:43:05 Д getxattr no /usr/bin/kdeinit5 dave997 16691 18807. 13/01/2019 13:43:05 Д getxattr no /usr/bin/kdeinit5 dave997 16692 19178. 13/01/2019 13:43:05 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17063 19179. 13/01/2019 13:43:05 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17064 19180. 13/01/2019 13:43:05 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17065 19181. 13/01/2019 13:43:05 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17066 19420. 13/01/2019 13:43:07 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17305 19421. 13/01/2019 13:43:07 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17306 19422. 13/01/2019 13:43:07 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17307 19423. 13/01/2019 13:43:07 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17308 19445. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17330 19450. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17335 19451. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17336 19452. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17337 19453. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17338 19454. 13/01/2019 13:43:10 /home/dave997/Д openat yes /usr/bin/dolphin dave997 17339 19463. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17348 19464. 13/01/2019 13:43:10 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17349 19465. 13/01/2019 13:43:10 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17350 19466. 13/01/2019 13:43:10 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17351 19470. 13/01/2019 13:43:10 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17355 19478. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17363 19479. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17364 19480. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17365 19481. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17366 19482. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17367 19483. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17368 19484. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17369 19485. 13/01/2019 13:43:11 /home/dave997/Д openat yes /usr/bin/dolphin dave997 17370 19487. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17372 19488. 13/01/2019 13:43:11 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17373 19489. 13/01/2019 13:43:11 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17374 19490. 13/01/2019 13:43:11 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17375 19693. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17578 19694. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17579 19695. 13/01/2019 13:43:12 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17580 19696. 13/01/2019 13:43:12 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17581 19723. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17608 19724. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17609 19725. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17610 19726. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17611 19727. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17612 19728. 13/01/2019 13:43:12 /home/dave997/Д openat yes /usr/bin/dolphin dave997 17613 19730. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17615 19731. 13/01/2019 13:43:12 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17616 19732. 13/01/2019 13:43:12 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17617 19733. 13/01/2019 13:43:12 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17618 19927. 13/01/2019 13:43:13 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17812 19928. 13/01/2019 13:43:13 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17813 19929. 13/01/2019 13:43:13 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17814 19930. 13/01/2019 13:43:13 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17815 19955. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17840 19963. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17848 19964. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17849 19965. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17850 19966. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/dolphin dave997 17851 19967. 13/01/2019 13:43:16 /home/dave997/Д openat yes /usr/bin/dolphin dave997 17852 19969. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17854 19970. 13/01/2019 13:43:16 /home/dave997/Д getxattr no /usr/bin/kdeinit5 dave997 17855 19971. 13/01/2019 13:43:16 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17856 19972. 13/01/2019 13:43:16 /home/dave997/Д openat yes /usr/bin/kdeinit5 dave997 17857 [dave997@localhost ~]$


The first lines are the ones to look at. Reported the whole ausearch output just for clarity.

Any ideas? Would be nice if we could have this fixed soon as it's a very annoying behavior which, among other things, creates suspects in someone who does not know who's acting behind the scenes.

Have a good afternoon,

David