Date: Wed, 25 Aug 1999 12:23:42 +0200 (MET DST) From: Nick Hibma <nick.hibma@jrc.it> To: Andrew Kenneth Milton <akm@mail.theinternet.com.au> Cc: uldisk@kb.lkb.bkc.lv, freebsd-security@FreeBSD.ORG Subject: Re: undelete Message-ID: <Pine.GSO.3.95q.990825121915.1185N-100000@elect8> In-Reply-To: <199908251012.UAA83465@mail.theinternet.com.au>
next in thread | previous in thread | raw e-mail | index | archive | help
Pretty sure that ufs does _not_ have undelete. The undelete feature in FAT is based on taking the name of the file you want to undelete, replace the first character with 0x2d and try whether the clusters are allocated or not. In Windows it is simply based on moving the file out of the way instead of deleting it, and keeping track of where the file went. In ext2fs I guess it must be something similar. I know of know such mechanism in ufs. Also the words 'undelete' and 'recover' do not appear in the source of ufs, ffs, mfs. So, you might be out of luck. Below the list of directories on that partition that you should have. Nick /var /var/tmp /var/tmp/vi.recover /var/account /var/at /var/at/jobs /var/at/spool /var/backups /var/crash /var/cron /var/cron/tabs /var/db /var/db/pkg /var/log /var/mail /var/msgs /var/preserve /var/run /var/rwho /var/spool /var/spool/lock /var/spool/lpd /var/spool/mqueue /var/spool/output /var/spool/output/lpd /var/spool/uucp /var/spool/uucp/.Preserve /var/spool/uucp/.Sequence /var/spool/uucp/.Status /var/spool/uucp/.Temp /var/spool/uucp/.Xqtdir /var/spool/uucppublic /var/spool/opielocks /var/yp /var/games /var/games/hackdir /var/games/hackdir/save /var/games/larn /var/games/phantasia /var/adm /var/adm/tcheck /var/adm/tcheck/databases > | Good joke :) > | Because this system have no tapes. > | I was admin for this sys only 2 days. > | Needs to undelete only /var .. > | > | Linux has MC. That can undelete files from ext2fs. > | May be FreeBSD also has MC with this feature? > > Midnight Commander is available from the ports tree: > > /usr/ports/misc/mc > > I dunno if it can undelete though. > > You should really have backups though (and better staff as well it seems) > even if you have to backup across the network. > > -- > Totally Holistic Enterprises Internet| P:+61 7 3870 0066 | Andrew > The Internet (Aust) Pty Ltd | F:+61 7 3870 4477 | Milton > ACN: 082 081 472 | M:+61 416 022 411 |72 Col .Sig > PO Box 837 Indooroopilly QLD 4068 |akm@theinternet.com.au|Specialist > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > -- ISIS/STA, T.P.270, Joint Research Centre, 21020 Ispra, Italy To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.3.95q.990825121915.1185N-100000>