Daniel Pittman wrote:
> Jonathan <jhhum...@bigpond.com> writes:
>> On Thu, 25 Dec 2008 11:42:56 pm Daniel Pittman wrote:

[...]

> You can use lsof(8) or the content of /proc/<pid>/fd to find deleted
> files held open — though, keep in mind that things do this for
> legitimate reasons, not just because something has gone wrong.

Probably tis clear-cut to those technically inclined but I'll just add here 
that lsof(8) spits list of opened files but does so only if the current
user (getuid()) has access to the process and their subsequent list of opened 
files. To dump a complete list of open files using lsof, invoke it as a
super user.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to