|
|
Subject: Re: Tools/Techniques for recovering "rm"'d files - msg#00233
List: macosx.admin
At 10:33 pm -0800 10/12/02, Dan Wood wrote:
I've recently lost some very useful data due to "rm -rf *" in the
wrong directory, and I'd like to get as much of it back as possible.
I'm sure that "rm" doesn't zero out the bytes, but I'm having a heck
of a time recovering anything.
I've tried both Norton Utilities and Prosoft's Data Rescue X, but it
looks like it's recovering files that were emptied from the trash,
not anything RM'd.
I've found references to some unix utilities like unrm and lazarus
-- but does anybody know if there are OSX builds of these tools?
(No luck looking on Fink.)
The Coroner's Tool Kit is the source for these utilities. There is no
reference to a Mac OS X build, but it has been tested on FreeBSD,
OpenBSD and BSD, and is at least partly perl based (I've only run it
under Solaris, and I can't remember its precise makeup).
The website is at < http://www.antioffline.com/TCT/>. There is also a
walkthrough available on the site.
Another idea is to somehow make a dump of my entire volume (perhaps
using disk copy to make a disk image) and then searching through the
file for familiar text patterns -- unfortunately, it's a 5 gig
volume, so that's a lot of wasted space and time!
This is essentially what unrm and lazarus do, but they attempt to
make the searching easier.....
Cheers,
Joel
--
Joel Smith
22 Springfield Way
Pateley Bridge Tel: +44 1423 711229 Mobile: +44 7768 803758
N.Yorks HG3 5PA Fax: +44 870 1617192
Was this page helpful?
Thread at a glance:
Previous Message by Date:
click to view message preview
Re: how to start a shell script on login
There is the LoginHook for the loginwindow where one can hook on some script or
application to be executed at user login. Information is found at
http://developer.apple.com/techpubs/macosx/Essentials/SystemOverview in the
Chapter "Booting and Loggin In", Section "Customization Techniques", Subsection
"Customizing Login and Logout Procedures".
Lutz.
Next Message by Date:
click to view message preview
Re: how to start a shell script on login
I'm sorry for the inconvenience caused by me only posting the pointer without a
summary. For a quick accesss I cite the relevant information from the referred
page.
[From Inside Mac OS X: System Overview at
http://developer.apple.com/techpubs/macosx/Essentials/SystemOverview Chapter
"Booting and Loggin In", Section "Customization Techniques", Subsection
"Customizing Login and Logout Procedures"]
To use the loginwindow hooks, you must modify the code for launching
loginwindow found in /etc/ttys. In this file is the following line:
console "/System/Library/CoreServices/loginwindow.app/loginwindow" vt100 on
secure window=/System/Library/CoreServices/WindowServer
onoption="/usr/libexec/getty std.9600"
This line tells the init program to launch loginwindow on the console terminal
and to use WindowServer (which is a symbolic link to the Window Manager
process) as the windowing-system process. Into this line, you can insert
additional parameters for loginwindow to process. Table 4-4 lists the
parameters currently supported by loginwindow.
Parameter Description of value
-LoginHook The full path to a script or tool to run when a user
successfully logs in.
-LogoutHook The full path to a script or tool to run when a user
successfully logs out.
-PowerOffDisabled If YES, the Shut Down and Restart buttons in the login
window are disabled; also, pressing the computers power button quits the Finder
and Dock applications but does not turn off the system. This feature prevents
users from casually powering down a system that provides some shared service,
such as a print server or file server.
Table 4-4 loginwindow parameters
The -LoginHook and -LogoutHook parameters are particularly useful because they
permit custom administrative, accounting, or security programs to run as part
of the login and logout procedures. For example, your modified console
definition in /etc/ttys might look similar to the following:
console "/System/Library/CoreServices/loginwindow.app/loginwindow
-PowerOffDisabled YES -LoginHook /Users/Administrator/Scripts/mailLoginToAdmin"
vt100 on secure window=/System/Library/CoreServices/WindowServer
onoption="/usr/libexec/getty std.9600"
[End cited documentation]
Lutz.
Previous Message by Thread:
click to view message preview
Tools/Techniques for recovering "rm"'d files
I've recently lost some very useful data due to "rm -rf *" in the wrong
directory, and I'd like to get as much of it back as possible. I'm
sure that "rm" doesn't zero out the bytes, but I'm having a heck of a
time recovering anything.
I've tried both Norton Utilities and Prosoft's Data Rescue X, but it
looks like it's recovering files that were emptied from the trash, not
anything RM'd.
I've found references to some unix utilities like unrm and lazarus --
but does anybody know if there are OSX builds of these tools? (No luck
looking on Fink.)
Another idea is to somehow make a dump of my entire volume (perhaps
using disk copy to make a disk image) and then searching through the
file for familiar text patterns -- unfortunately, it's a 5 gig volume,
so that's a lot of wasted space and time!
Any suggested tools or techniques would be welcome.
Next Message by Thread:
click to view message preview
Re: Tools/Techniques for recovering "rm"'d files
--On Wednesday, December 11, 2002 11:10 +0000 Joel Smith
<joel-BjjWmaUEk86TY6FTCsQk+9Bc4/FLrbF6@xxxxxxxxxxxxxxxx> wrote:
At 10:33 pm -0800 10/12/02, Dan Wood wrote:
[...]
I've found references to some unix utilities like unrm and lazarus
-- but does anybody know if there are OSX builds of these tools?
The Coroner's Tool Kit is the source for these utilities. There is no reference
to a Mac OS X build, but it has been tested on FreeBSD, OpenBSD and BSD, and is
at least partly perl based (I've only run it under Solaris, and I can't
remember its precise makeup).
Will such UNIX "undelete" utilities work on non-UFS filesystems?
-sjk
|
|