Re: viewing inode data
- From: "Bill Cunningham" <nospam@xxxxxxxxxxxxx>
- Date: Mon, 6 Apr 2009 22:02:51 -0400
"Scott Lurndal" <scott@xxxxxxxxxxxxx> wrote in message
news:49daacd0$0$19072$f56e502@xxxxxxxxxxxxxxxxxxxxxxxx
What do you think is in 'buffer'?
(Hint: It's the inode data).
Type 'man 2 stat'
Ok I see. :) I use the linux command shred from time to time. I am using
an ext3 filesystem. Is there a way I can name the inode number for example,
using ls -lai in a directory, and read its' inode numbers for files. What
I'm really getting at here is using shred or redirecting /dev/random or
/dev/zero to an area in the filesystem really erasing all trace of the file?
I think the files can be recreated by using inode data. I may be wrong but
could using shred hold up againsts a DoD or forensic analysis attempt. And
let me say here I am not keeping anything illegal on my HD too.
Bill
.
- Follow-Ups:
- Re: viewing inode data
- From: David Schwartz
- Re: viewing inode data
- References:
- viewing inode data
- From: Bill Cunningham
- Re: viewing inode data
- From: Gordon Burditt
- Re: viewing inode data
- From: Bill Cunningham
- Re: viewing inode data
- From: Bjarni Juliusson
- Re: viewing inode data
- From: Bill Cunningham
- Re: viewing inode data
- From: Scott Lurndal
- Re: viewing inode data
- From: Bill Cunningham
- Re: viewing inode data
- From: Scott Lurndal
- viewing inode data
- Prev by Date: Re: viewing inode data
- Next by Date: how to determine OS?
- Previous by thread: Re: viewing inode data
- Next by thread: Re: viewing inode data
- Index(es):
Relevant Pages
|