Hi, > Hi everyone, > > Is there any reiserfs undelete command/application > out there, for the case of accidently deleted file(s) ? > > I rarely need an undelete command (once in some years), > but i always had a nice GUI tool for undeleting files > from NTFS partitions under Windows (copying the file(s) > to another partition, not changing anything). > > I can't believe that such an important thing should not > be possible with reiserfs while every MS-FileSys supports it...
Well, actually the issue of undeleting files under a multi process systeme is quite a easy thing to solve: it is impossible to assure that the deleted file will be kept on disk until you try to recover it. Since any other process can write right after you delete your file, there is no "sure way" to recover them. You could try, though, to find where it stayed, and, if your file is not too big to be split into several non contiguous blocks, try to recover it by reading right from the partition (as Phil Sexton pointed out). With a bigger file, it is probably that your data is spread out all around your hard drive (actually, not all around, but kind of). Well, that's just my opinion. It's been "a while" since I studied OS, so I may be wrong. I apologize in case of that. The way "OS" like windows fake this "file recover" is by moving the files into an other destination, not by recovering them (at least in the multi process windows -the new ones-; it was not so in the past). You could try to rewrite the "rm" program, or the code responsible of deleting in the VFS to "fake" a removal. Good luck with your investigation!! -- Juan �ngel PGP key on pgp.rediris.es (8FAF18B7) or search on http://www.rediris.es/cert/servicios/keyserver/
pgp00000.pgp
Description: signature
