undelete ?

[Bruce Varney]

In article <26542 at adm.brl.mil> rol at grasp1.univ-lyon1.fr (Paul Rolland) writes:
}In his message, msc%SUN2.NCKU.EDU.TW at VM.TCS.Tulane.EDU said :
}> 
}> Dear Netters :
}>       Is there any tool which can be used to undelete UNIX files ?
}> 
}
}#######
}   #      ####    ####           #         ##     #####  ######
}   #     #    #  #    #          #        #  #      #    #
}   #     #    #  #    #          #       #    #     #    #####
}   #     #    #  #    #          #       ######     #    #        ###     ###
}   #     #    #  #    #          #       #    #     #    #        ###     ###
}   #      ####    ####           ######  #    #     #    ######   ###     ###
}
}   I'm afraid there's not such a tools... Sorry for you :(
}	Paul


Actually, it depends on your system. At purdue we have something called an
entombing library. It is a set of systemcall-look-alikes (creat, unlink, etc.)
which first call and entombing daemon, and then call the real system call.
by linking programs to this library (such as rm) when you compile them
you enable entombing. When files are destroyed by rm, mv or cp, they are
acually moved to a directory called $HOME/../tomb/$NAME   (i.e. My $HOME
is /userb/asg so my entombed files would be put it /userb/tomb/asg .)
There they are kept for 24 hours (unless the disk is near full at which point
the time decreases, and except for a.out and .o files which last only 15
minutes). So if I accidently rm a file, I can use the program unrm which
war created to unremove files. If you would like a more techinichal 
explaination of the system, let me know and I will see what I can find out.

  And there are always tape backups if your sysadm makes them, and the file
existed at the time of the last backup.
Good luck, I hope your file(s) is(are) on tape.
			As Always
			  The Grand Master.
---------
                                   ###             ##
Courtesy of Bruce Varney           ###               #
aka -> The Grand Master                               #
asg at sage.cc.purdue.edu             ###    #####       #
PUCC                               ###                #
;-)                                 #                #
;'>                                #               ##