From owner-freebsd-fs@FreeBSD.ORG  Tue Nov 13 21:54:39 2007
Return-Path: <owner-freebsd-fs@FreeBSD.ORG>
Delivered-To: freebsd-fs@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id B08DC16A421
	for <freebsd-fs@freebsd.org>; Tue, 13 Nov 2007 21:54:39 +0000 (UTC)
	(envelope-from kris@FreeBSD.org)
Received: from weak.local (pointyhat.freebsd.org [IPv6:2001:4f8:fff6::2b])
	by mx1.freebsd.org (Postfix) with ESMTP id 474E113C43E;
	Tue, 13 Nov 2007 21:54:37 +0000 (UTC)
	(envelope-from kris@FreeBSD.org)
Message-ID: <473A1D1E.6010408@FreeBSD.org>
Date: Tue, 13 Nov 2007 22:54:38 +0100
From: Kris Kennaway <kris@FreeBSD.org>
User-Agent: Thunderbird 2.0.0.6 (Macintosh/20070728)
MIME-Version: 1.0
To: Rene Ladan <r.c.ladan@gmail.com>
References: <20071113174347.GA4288@servidor1.cursosvirtuales.com.ar>
	<473A0F7A.9010406@gmail.com>
In-Reply-To: <473A0F7A.9010406@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-fs@freebsd.org, Fernando Schapachnik <fernando@schapachnik.com.ar>
Subject: Re: Undeleting (possible?)
X-BeenThere: freebsd-fs@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Filesystems <freebsd-fs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-fs>,
	<mailto:freebsd-fs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-fs>
List-Post: <mailto:freebsd-fs@freebsd.org>
List-Help: <mailto:freebsd-fs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-fs>,
	<mailto:freebsd-fs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Nov 2007 21:54:39 -0000

Rene Ladan wrote:
> Fernando Schapachnik schreef:
>> Data recovery scenario (on 6.2): mistake while messing with Mail directory...
>>
>> cd ~
>> mv Mail/xMail ..
>> rm -r xMail (should have rm'ed Mail)
>> No extra writes to the filesystem. Plenty of extra space.
>>
>> Now I want to recover xMail (contains mbox files). sleuthkit only finds Mail/xMail with no content. It also doesn't find any of the contained mboxes.
>>
>> Is there still hope? My (limited) understanding is the content should be more or less intact. Problem is: how do I find it?
>>
> Maybe rm -W helps?  I've never tried it seriously myself though.

No, that's not what it is for.

Undeletion in UFS is only possible for wizards.  Otherwise, your only 
feasible option is to restore from backup.

Kris