From owner-freebsd-chat Tue Jun 6 19:24:48 2000 Delivered-To: freebsd-chat@freebsd.org Received: from smtp09.phx.gblx.net (smtp09.phx.gblx.net [206.165.6.139]) by hub.freebsd.org (Postfix) with ESMTP id 326FF37B57B for ; Tue, 6 Jun 2000 19:24:45 -0700 (PDT) (envelope-from tlambert@usr08.primenet.com) Received: (from daemon@localhost) by smtp09.phx.gblx.net (8.9.3/8.9.3) id TAA58202; Tue, 6 Jun 2000 19:24:42 -0700 Received: from usr08.primenet.com(206.165.6.208) via SMTP by smtp09.phx.gblx.net, id smtpdcwApMa; Tue Jun 6 19:24:35 2000 Received: (from tlambert@localhost) by usr08.primenet.com (8.8.5/8.8.5) id TAA06462; Tue, 6 Jun 2000 19:24:34 -0700 (MST) From: Terry Lambert Message-Id: <200006070224.TAA06462@usr08.primenet.com> Subject: Re: Why encourage stupid people to use *BSD WAS:Re: IE To: tms2@mail.ptd.net (Thomas M. Sommers) Date: Wed, 7 Jun 2000 02:24:34 +0000 (GMT) Cc: freebsd-chat@FreeBSD.ORG In-Reply-To: <3939A4B5.C62DF7F8@mail.ptd.net> from "Thomas M. Sommers" at Jun 03, 2000 08:37:09 PM X-Mailer: ELM [version 2.5 PL2] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > > What's wrong with having an undelete command, if someone can implement > > one? > > Nothing, *if* it can be implemented without affecting the integrity of > the system. But coming up with an implementation is not easy. Actually, there already is one; it uses the "whiteout" option; this construct "removes" the file without actually removing it; it's a "no-see-um", rather than a delete. > There are security concerns. Not really. The inode is still allocated to the file; the entries for the file are simply not returned by "getdirentries(2)" or "getdents(2)". The ownership of the file and permissions remain unchanged. Security issues for files that you really want deleted so that the police don't get you because you're a criminal are why there is a "-P" option to "rm". > How do undeleteable files interact with disk quotas? They are accounted against your quota, until purged. > How do they interact with multiple hard links? How does deleting a file that has other hard links interact with hard links? Whiteout interacts by _not_ reducing the link count, and setting the "whiteout" flag on the directory entry. > That, in the 30 years since its creation, Unix has not come > up with undelete strongly suggests that either it can't be > done or that there is no real need for it. It's been done many times for UNIX; visit the comp.sources.unix archives; many implementations predate the ArpaNet. As we used to say: "If VMS can do it, UNIX can do it better". Terry Lambert terry@lambert.org --- Any opinions in this posting are my own and not those of my present or previous employers. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message