Some folders are not visible? [CLOSED]

Questions, glitches, bugs and crashes
Locked
don
Posts: 134
Joined: Sat Jul 18, 2015 11:03 am
Location: Sydney, AU

Some folders are not visible? [CLOSED]

Post by don » Wed Nov 25, 2015 12:05 am

Good day.

it looks like some folders are not displayed by Files. Like opt.

Is there a configuration setting (file?) where I could update the list of ignored folders?

User avatar
mike
Posts: 1060
Joined: Thu Jul 16, 2015 5:35 am
Location: Exeter, UK

Re: Some folders are not visible?

Post by mike » Wed Nov 25, 2015 4:00 am

don wrote:Good day.

it looks like some folders are not displayed by Files. Like opt.

Is there a configuration setting (file?) where I could update the list of ignored folders?
Hi don!

On my system /opt is invisible directory - maybe that's your case too?
There's no "invisible" list in Files anyway, only an option to show/hide items tagged as hidden.

Mike.
Attachments
Screen Shot 2015-11-25 at 09.58.30.png
Screen Shot 2015-11-25 at 09.58.30.png (40.4 KiB) Viewed 10852 times

don
Posts: 134
Joined: Sat Jul 18, 2015 11:03 am
Location: Sydney, AU

Re: Some folders are not visible?

Post by don » Thu Dec 03, 2015 1:12 am

Figured that out (thanks to the new extended feature attribute viewer):

folders with com.apple.FinderInfo attribute set are not visible.

All good.

User avatar
mike
Posts: 1060
Joined: Thu Jul 16, 2015 5:35 am
Location: Exeter, UK

Re: Some folders are not visible?

Post by mike » Thu Dec 03, 2015 2:26 am

Don, that's not that simple.

com.apple.FinderInfo holds a whole set of variables inside it and AFAIK when that attribute with hidden flag set on is attached to some file - in fact BSD "hidden" flag is implicitly set.
BTW, have you checked that file with File Attributes sheet (ctrl+a)?
In my case /opt is hidden exactly because BSD hidden flag was on.
For additional information, in case of: https://en.wikipedia.org/wiki/Chattr#In ... chflags.29

Mike.

JayB
Posts: 192
Joined: Sun Jan 08, 2017 4:38 pm

Re: Some folders are not visible? [CLOSED]

Post by JayB » Mon Jan 09, 2017 3:11 pm

There are some other hidden files normally not showing up, i.e. actual "invisible" files, important ones. I think they're called "cloaked". I currently have 5 cloaked files/directories in my root directory, next to the files/dirs with the "standard" hidden flag:

Code: Select all

.dbfseventsd
.HFS+ Private Directory Data\15
.journal
.journal_info_block
\342\220\200\342\220\200\342\220\200\342\220\200HFS+ Private Data
Plus dev, of course.

The right window is the root folder as seen by Rixstep's GDE. Does Nimble Commander have a way of showing and even accessing these files/dirs? (I'm going to post this on GitHub too.)

Image

User avatar
mike
Posts: 1060
Joined: Thu Jul 16, 2015 5:35 am
Location: Exeter, UK

Re: Some folders are not visible? [CLOSED]

Post by mike » Mon Jan 09, 2017 3:51 pm

JayB,
JayB wrote:There are some other hidden files normally not showing up, i.e. actual "invisible" files, important ones. I think they're called "cloaked". I currently have 5 cloaked files/directories in my root directory, next to the files/dirs with the "standard" hidden flag.
Does Nimble Commander have a way of showing and even accessing these files/dirs? (I'm going to post this on GitHub too.)
I highly doubt these filesystem internals can be accessed via official APIs and without some level of hacking.
Nimble Commander mostly uses POSIX APIs to interact with underlying filesystems, they doesn't provide such specific information.
But may I ask, why on earth might anybody want to interact with these entries?

JayB
Posts: 192
Joined: Sun Jan 08, 2017 4:38 pm

Re: Some folders are not visible? [CLOSED]

Post by JayB » Mon Jan 09, 2017 3:58 pm

:) Normally I wouldn't interact with them; I only found out about cloaked files a couple of days ago. However, from a security perspective (at least on systems like mine with SIP disabled) that's probably how rootkits would disguise themselves, as cloaked files; in these cases you might need a way to access (i.e. delete them). But I have yet to hear about macOS rootkits. (There are a couple in the Unix/Linux world, I believe.)

User avatar
mike
Posts: 1060
Joined: Thu Jul 16, 2015 5:35 am
Location: Exeter, UK

Re: Some folders are not visible? [CLOSED]

Post by mike » Mon Jan 09, 2017 4:03 pm

Huh, well I'm definitely not going to enter an anti-malware business, leave it to folks like Apple or Symantec :D
Anyway, catching this low-level kind of viruses is not an easy task on Macs.

JayB
Posts: 192
Joined: Sun Jan 08, 2017 4:38 pm

Re: Some folders are not visible? [CLOSED]

Post by JayB » Mon Jan 09, 2017 11:15 pm

You can apparently get infos on cloaked files with fls and istat: https://wiki.sleuthkit.org/index.php?ti ... Hard_Links

I've actually installed fls & istat as part of sleuthkit with homebrew, but I haven't found out yet how to deal with this stuff. Anyways, not really important or NC.

Locked