There is an undelete HOWTO at http://www.linuxdoc.org/HOWTO/mini/Ext2fs-Undeletion.html.
As well, you should research the 'chattr' command. With 'chattr', you can set a special attribute on files and cause them to be 'kept after deletion' so that you can recover them with greater chances for success. Another thing, which is more of a bit of advice than anything, is to add aliases to all of the user profiles to protect them from themselves. For instance, on my multi-user machines I have 'rm' replaced with a shell script that basically does "mv $1 ~/recycle-bin", and I have an "emptybin" command which can be used by the users to clear out ~/recycle-bin. Hope this helps! Garrett -----Original Message----- From: Sousa Ferreira [mailto:[EMAIL PROTECTED]] Sent: Friday, January 11, 2002 2:16 AM To: ML security-basics Subject: Urgent -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How can i undelete files on an ext2 partition running slack 7.1 ???? A normal user deleted some of his own files and now is trying to comit suicide ;). Thanks for youy prompt awnser. Best Regards Sousa Ferreira PGP KeyID : 0xB7723B21 -----BEGIN PGP SIGNATURE----- Version: PGP 7.0.4 iQA/AwUBPD6tPSNcH2C3cjshEQKA7gCffNvFsYaUTtK0Y16mBv3HapsrMdMAn37L LAkY9tU2aTIwcFonaG38RsON =yvgP -----END PGP SIGNATURE-----
