> Some processes do this deliberately for temporary files: > They create/open a new file and then immediately unlink it. > This yields an "anonymous file", which won't need to be specially > cleaned up, even if the program crashes.
Bad Guys do this, too, because such "deleted" files aren't easily found so they draw less unwanted attention. One way to spot them is this: ls -lF /proc/*/fd ...where "deleted" files are marked as such. _______________________________________________ gnhlug-discuss mailing list gnhlug-discuss@mail.gnhlug.org http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/
