[Question] rm'ing .pub
 

I lent my friend my n800 for a day to give him a hands on test to see if it would be any good for his needs upon returning it I have noticed he must have run ssh-keygen which has created a file /home/.pub which will not allow me to rm it.

Does anyone have any tips?

Thanks for any help in advance.

Re: [Question] rm'ing .pub
 

Sounds like it was done as root.

Install your favourite root access package (rootsh, sudser etc)
run:
sudo gainroot
rm -rf /home/user/.pub

Re: [Question] rm'ing .pub
 

qwerty12: Thanks for the fast reply, yes the dir was crated as root and I have tryed to rm it in the given way but yet it still does not remove itself

I have just noticed the directory seems out of line from the ls output :/

Re: [Question] rm'ing .pub
 

You are in the root home dir.

Try rm -rf /root/.pub

Re: [Question] rm'ing .pub
 

Well didn't I make it look like I know nothing about Linux and its filesystem, I have been trying in the correct way before "rm -rf /root/.pub" will no luck, what I did find is when I typed "rm -rf /root/." then pressed TAB twice the files listed did not list .pub in there.

I have found the solution though.

rm /root/*.pub

Seems there was a space in there some where for some reason, I have tested by creating a dir with a space infront of it an found that the N800 diablo does not show a \ a for the dir name like most current Linux OS's do.

They really should change this I think, then again this is just person prefence for me.

qwerty12: Thanks none the less for your help

Re: [Question] rm'ing .pub
 

Seems I also have a dir which is a space :/ WTF has my friend done bla last time I am letting my device out of my sight

Re: [Question] rm'ing .pub
 

¬¬ Now this is just takeing the mick

edit/update -----------------------------------

I finaly got the unamed file to be rm'ed by useing

rm -i ./*

Re: [Question] rm'ing .pub
 

Heh. Quite the 'friend'.

Re: [Question] rm'ing .pub
 

Ha dude if it was due to something I had done myself I would put my hand upto it but this time I did not break it.

Re: [Question] rm'ing .pub
 

Yeah, those quotes were indicating doubt over how much a friend he actually was, not whether it was you yourself; while I have been on the receiving end of that lie a couple times, it's not been often enough for me to even think of it, much less assume it was true.

And I can't see how it could have been accidental, though I'm also not sure why he'd do it intentionally.

Re: [Question] rm'ing .pub
 

Only thing I can think of is he was trying to backdoor my Device an wanted to store some form of connectback shell or something that sort in the hidden file, thats really the only thing I can think of since I showed him how insecure one of the sites he built was.

Either way is sorted now anyway. Im just guna have to check what over files may have changed.

Re: [Question] rm'ing .pub
 

that was what I was going to say... sounds like a half-fast rootkit attempt.

glad you were able to clean it up.

Re: [Question] rm'ing .pub
 

If that "friend" of yours had unrestricted root access for any lenght of time (as has been implied) re-flash the device now! There's no telling what other hidden "surprises" your tablet has in it now.

Re: [Question] rm'ing .pub
 

So he can SSH into the tablet whenever he wants perhaps? If he's got your private key, he can do all sorts of stuff :P

Re: [Question] rm'ing .pub
 

Next time you see the "friend", ask if you can use the computer to check your emails and dump a few viruses on the computer.

Re: [Question] rm'ing .pub
 

Iv flashed an started from scrach, il be paying him back in kinda when I next get the chance