Hi, Kazuhiro Takenaka wrote: > Hi all, > > I tried restoring an ntfs in a kvm virtual disk by "cp" and > "ntfs-3g.secaudit". In the ntfs, a Windows 2008 system was > installed and it can boot after the restoration. > > So I think the restoration succeed but I have a suspence about this. > > When I used "ntfs-3g.secaudit" with "-se" options for restoring > the audit data, it ouput "! No errors were found" but exited with 1. > > My questions are: > > A. There is a mismatch between the message and the exit status, > is this a bug of "ntfs-3g.secaudit"? >
The "no error found" means that all your ACLs were processed successfully, but you may have other errors (files which cannot be opened, etc.) Of course, bugs sometimes do occur... > B. How can I do further confirmation of the completion of > the restoration by commands or tools that provided by Microsoft? > An easy way to do is to backup the result with option "-bv", filter the lines starting with "# File" and sort the result. Then compare with the result of the same procedure applied to source volume : ntfs-3g.secaudit -bv device | grep "^# File" | sort Then, doing a diff will tell you whether the ACLs in both volume have the same hashcodes, which gives a reasonable probability of being the same. > The Restore Operations I did were: > > # I used ntfs-3g-2009.11.14 and an Redhat EL 5.4(x86-64) > # system as host OS and a Windows 2008 R2 (x86-64) system as guest OS. > I have personnally never used guest OSes, and I cannot provide any advice for such configuration. > # ntfs-3g.secaudit -se /dev/mapper/loop0p2 sec.data > > The execution of this command producted many messages of its progress > and eventually it output the following messages > > ! No errors were found > 75186 ACLs have been applied > > * But the command exited with 1. > Did you save the output ? There must be an error message, easily identified by an '*' as the first character. > 9. Boot the restored Windows 2008 system > > The Windows 2008 system seems to start normaly. > I still warn you against the fact that you have only restored the ACLs, not the short names, the junctions, the object_ids, ... ntfs-3g.secaudit does only process security oriented data. You may get into trouble because of that. Files are sometimes designated by short names in the registry, Vista uses junctions, and object_ids are used in shortcuts... ntfscp copies all these. Regards Jean-Pierre ------------------------------------------------------------------------------ Return on Information: Google Enterprise Search pays you back Get the facts. http://p.sf.net/sfu/google-dev2dev _______________________________________________ ntfs-3g-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel
