Quote:
Originally Posted by robbak
Interesting, although with a heavy linux/bash flavour.
One command got my interest: lsof can tell you the inode of a deleted-but-still-there file. Is there any command that can relink the file? I googled it, but all I could find is how to rescue it from the mess of a linux /proc filesystem.
|
Linux, or ext2 rather.. marks an inode as deleted, but it isn't actually removed.. recovering a file in Linux is thusly as simple as toggling the delete bit in the inode.
BSD/FFS removes the inode of a file when unlink()'d.. recovery is unfortunately impossible unless you remember the blocks the file resided in.